ite$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:39 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:39 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:39 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

22:59:39 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:39 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

22:59:39 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

22:59:39 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:39 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:39 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:39 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:39 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:40 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:40 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 1:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 1:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 1:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 0:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:41 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:41 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 0:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 0:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:42 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:42 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 2:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 2:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 2:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:43 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:43 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)

22:59:44 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)

22:59:44 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:44 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 2:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:44 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 2:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 2:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 3:
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:45 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:45 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:46 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:46 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:46 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x0, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x0, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x0, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:47 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)

22:59:47 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:47 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:59:48 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 3:
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:48 executing program 3:
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:48 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:48 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:48 executing program 3:
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:48 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:49 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:59:49 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:59:49 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:49 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:49 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

22:59:50 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:50 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:50 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:50 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:50 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:51 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:51 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:51 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:51 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)

22:59:51 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:51 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:51 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:51 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:51 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 1:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 1:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x8}, 0x5c8, 0x8})

22:59:52 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{}, 0x5c8, 0x8})

22:59:52 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{}, 0x0, 0x8})

22:59:53 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240))

22:59:53 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 1:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{}, 0x0, 0x8})

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, 0x0, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, 0x0, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, 0x0, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, 0x0, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, 0x0, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:53 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:53 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:54 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:54 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:55 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:55 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:55 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:56 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:56 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:57 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:57 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x0, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x0, 0x7fffffff, 0xa779}}, 0x11c)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x0, 0xa779}}, 0x11c)

22:59:57 executing program 1:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:57 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:57 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:57 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:58 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:58 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:58 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:58 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:58 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff}}, 0x11c)

22:59:58 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:58 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:58 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:58 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, 0x0, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:58 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:58 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:58 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

22:59:59 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:59 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

22:59:59 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:59 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

22:59:59 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

22:59:59 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:00 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:00 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:00 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

23:00:00 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

23:00:00 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

23:00:00 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:00 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

23:00:00 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)

23:00:00 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:00 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:00 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9}, 0x0, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:00 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:01 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:01 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x0, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 0:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 1:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 1:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:01 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:01 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 3:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x0, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, 0x0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x0, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, 0x0, 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:02 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:02 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 0:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 3:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 0:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 2:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:03 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:03 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 2:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 3:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 1:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 0:
openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:04 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:04 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0)
write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:05 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:05 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:05 executing program 3:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:05 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:05 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:05 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:05 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:05 executing program 2:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:05 executing program 2:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:05 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 2:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:06 executing program 3:
r0 = openat$sndtimer(0xffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:06 executing program 2:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

23:00:06 executing program 2:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:06 executing program 2:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:06 executing program 1:
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)

23:00:06 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:06 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:06 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)

23:00:06 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:06 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:06 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})

23:00:06 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)

23:00:06 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:06 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:06 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:07 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:07 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:07 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

23:00:07 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:07 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:07 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

23:00:07 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:07 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

23:00:07 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

23:00:07 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

23:00:07 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)

23:00:07 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

23:00:07 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

23:00:07 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)

23:00:07 executing program 2:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:07 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:07 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:00:07 executing program 0:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)

23:00:07 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000), 0x100, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x9a, &(0x7f0000000080)=0x4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x428c0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0))
r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = syz_io_uring_setup(0x8b3, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x1, 0x153}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x8001, 0x61c02)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3], 0x5)
r4 = socket(0x27, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0)=[r3, r4, r3, r2], 0x4)
r5 = socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000400)=0x1, &(0x7f0000000440)=0x4)
r6 = syz_io_uring_setup(0x4937, &(0x7f0000000480)={0x0, 0x1a33, 0x2, 0x2, 0x89, 0x0, r0}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540))
r7 = openat$proc_capi20(0xffffff9c, &(0x7f0000000580), 0x238802, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f00000005c0)=r7, 0x1)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000600)={0x6, 0x5, 0x4, {0xa, @sdr={0x4745504d, 0xf04}}, 0x7})
r8 = socket(0x29, 0x3, 0x7ff)
sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x1)

23:00:07 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (fail_nth: 1)

[  298.054237][ T5894] FAULT_INJECTION: forcing a failure.
[  298.054237][ T5894] name failslab, interval 1, probability 0, space 0, times 0
[  298.084037][ T5894] CPU: 1 PID: 5894 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  298.097826][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  298.109430][ T5894] Call Trace:
23:00:07 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 1)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  298.114011][ T5894]  <TASK>
[  298.117723][ T5894]  dump_stack_lvl+0xcd/0x134
[  298.121056][ T5898] FAULT_INJECTION: forcing a failure.
[  298.121056][ T5898] name failslab, interval 1, probability 0, space 0, times 0
[  298.122534][ T5894]  should_fail.cold+0x5/0xa
[  298.144447][ T5894]  should_failslab+0x5/0x10
[  298.149121][ T5894]  __kmalloc+0x7e/0x350
[  298.153306][ T5894]  ? tomoyo_realpath_from_path+0xc3/0x620
[  298.159061][ T5894]  tomoyo_realpath_from_path+0xc3/0x620
[  298.164557][ T5894]  ? tomoyo_profile+0x42/0x50
[  298.169145][ T5894]  tomoyo_path_number_perm+0x1d5/0x590
[  298.174712][ T5894]  ? tomoyo_path_number_perm+0x18d/0x590
[  298.180333][ T5894]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  298.186085][ T5894]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  298.192073][ T5894]  ? __context_tracking_exit+0xb8/0xe0
[  298.197631][ T5894]  ? __fget_files+0x286/0x470
[  298.202312][ T5894]  security_file_ioctl+0x50/0xb0
[  298.207218][ T5894]  __do_compat_sys_ioctl+0x4e/0x290
[  298.212419][ T5894]  __do_fast_syscall_32+0x65/0xf0
[  298.217444][ T5894]  do_fast_syscall_32+0x2f/0x70
[  298.222195][ T5894]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  298.228342][ T5894] RIP: 0023:0xf7f7c549
[  298.232424][ T5894] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  298.251759][ T5894] RSP: 002b:00000000f7f775cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  298.260143][ T5894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000403c5404
[  298.268018][ T5894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  298.275852][ T5894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  298.283909][ T5894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  298.291460][ T5894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  298.299423][ T5894]  </TASK>
[  298.302378][ T5898] CPU: 2 PID: 5898 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  298.312387][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  298.313662][ T5894] ERROR: Out of memory at tomoyo_realpath_from_path.
[  298.323410][ T5898] Call Trace:
[  298.323422][ T5898]  <TASK>
[  298.323430][ T5898]  dump_stack_lvl+0xcd/0x134
[  298.323474][ T5898]  should_fail.cold+0x5/0xa
[  298.323494][ T5898]  should_failslab+0x5/0x10
[  298.323509][ T5898]  __kmalloc+0x7e/0x350
[  298.323523][ T5898]  ? tomoyo_realpath_from_path+0xc3/0x620
[  298.323543][ T5898]  tomoyo_realpath_from_path+0xc3/0x620
[  298.323559][ T5898]  ? tomoyo_profile+0x42/0x50
[  298.323578][ T5898]  tomoyo_path_number_perm+0x1d5/0x590
[  298.323595][ T5898]  ? tomoyo_path_number_perm+0x18d/0x590
[  298.323616][ T5898]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  298.323636][ T5898]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  298.323674][ T5898]  ? __context_tracking_exit+0xb8/0xe0
[  298.397425][ T5898]  ? __fget_files+0x286/0x470
[  298.402053][ T5898]  security_file_ioctl+0x50/0xb0
[  298.406863][ T5898]  __do_compat_sys_ioctl+0x4e/0x290
[  298.412011][ T5898]  __do_fast_syscall_32+0x65/0xf0
[  298.417064][ T5898]  do_fast_syscall_32+0x2f/0x70
[  298.421819][ T5898]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  298.428011][ T5898] RIP: 0023:0xf7f01549
[  298.432021][ T5898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  298.451529][ T5898] RSP: 002b:00000000f7efc5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  298.461278][ T5898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  298.470775][ T5898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  298.479684][ T5898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  298.489376][ T5898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  298.499236][ T5898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  298.509009][ T5898]  </TASK>
[  298.516656][ T5898] ERROR: Out of memory at tomoyo_realpath_from_path.
23:00:08 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 1)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  298.523965][ T5901] FAULT_INJECTION: forcing a failure.
23:00:08 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (fail_nth: 2)

[  298.523965][ T5901] name failslab, interval 1, probability 0, space 0, times 0
[  298.539634][ T5901] CPU: 0 PID: 5901 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:08 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 1)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  298.554033][ T5901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  298.557109][ T5905] FAULT_INJECTION: forcing a failure.
[  298.557109][ T5905] name failslab, interval 1, probability 0, space 0, times 0
[  298.563080][ T5901] Call Trace:
[  298.563091][ T5901]  <TASK>
[  298.563099][ T5901]  dump_stack_lvl+0xcd/0x134
[  298.587099][ T5901]  should_fail.cold+0x5/0xa
[  298.592812][ T5901]  should_failslab+0x5/0x10
[  298.598311][ T5901]  __kmalloc+0x7e/0x350
[  298.603366][ T5901]  ? tomoyo_realpath_from_path+0xc3/0x620
[  298.610405][ T5901]  tomoyo_realpath_from_path+0xc3/0x620
[  298.617270][ T5901]  ? tomoyo_profile+0x42/0x50
[  298.623126][ T5901]  tomoyo_path_number_perm+0x1d5/0x590
[  298.628830][ T5908] FAULT_INJECTION: forcing a failure.
[  298.628830][ T5908] name failslab, interval 1, probability 0, space 0, times 0
[  298.629367][ T5901]  ? tomoyo_path_number_perm+0x18d/0x590
[  298.648480][ T5901]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  298.654924][ T5901]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  298.661586][ T5901]  ? __context_tracking_exit+0xb8/0xe0
[  298.667660][ T5901]  ? __fget_files+0x286/0x470
[  298.672883][ T5901]  security_file_ioctl+0x50/0xb0
[  298.678409][ T5901]  __do_compat_sys_ioctl+0x4e/0x290
[  298.684149][ T5901]  __do_fast_syscall_32+0x65/0xf0
[  298.689815][ T5901]  do_fast_syscall_32+0x2f/0x70
[  298.694995][ T5901]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  298.702017][ T5901] RIP: 0023:0xf7f6f549
[  298.706595][ T5901] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  298.726553][ T5901] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  298.735112][ T5901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  298.742965][ T5901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  298.750875][ T5901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  298.758724][ T5901] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  298.766730][ T5901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  298.774877][ T5901]  </TASK>
[  298.781662][ T5905] CPU: 2 PID: 5905 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  298.781738][ T5901] ERROR: Out of memory at tomoyo_realpath_from_path.
[  298.794569][ T5905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  298.794590][ T5905] Call Trace:
[  298.794599][ T5905]  <TASK>
[  298.794610][ T5905]  dump_stack_lvl+0xcd/0x134
[  298.794653][ T5905]  should_fail.cold+0x5/0xa
[  298.794690][ T5905]  should_failslab+0x5/0x10
[  298.794715][ T5905]  __kmalloc+0x7e/0x350
[  298.836846][ T5905]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[  298.842348][ T5905]  tomoyo_encode2.part.0+0xe9/0x3a0
[  298.847631][ T5905]  ? trace_kmalloc+0x32/0xf0
[  298.852133][ T5905]  tomoyo_encode+0x28/0x50
[  298.856592][ T5905]  tomoyo_realpath_from_path+0x186/0x620
[  298.862043][ T5905]  tomoyo_path_number_perm+0x1d5/0x590
[  298.867404][ T5905]  ? tomoyo_path_number_perm+0x18d/0x590
[  298.872959][ T5905]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  298.878731][ T5905]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  298.885405][ T5905]  ? __context_tracking_exit+0xb8/0xe0
[  298.890861][ T5905]  ? __fget_files+0x286/0x470
[  298.896234][ T5905]  security_file_ioctl+0x50/0xb0
[  298.901243][ T5905]  __do_compat_sys_ioctl+0x4e/0x290
[  298.906367][ T5905]  __do_fast_syscall_32+0x65/0xf0
[  298.911259][ T5905]  do_fast_syscall_32+0x2f/0x70
[  298.917240][ T5905]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  298.924126][ T5905] RIP: 0023:0xf7f7c549
[  298.928347][ T5905] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  298.952035][ T5905] RSP: 002b:00000000f7f775cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  298.962005][ T5905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000403c5404
[  298.971760][ T5905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  298.980941][ T5905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  298.988908][ T5905] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  298.997005][ T5905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  299.005038][ T5905]  </TASK>
[  299.010553][ T5908] CPU: 0 PID: 5908 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  299.011028][ T5905] ERROR: Out of memory at tomoyo_realpath_from_path.
[  299.021226][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  299.021258][ T5908] Call Trace:
[  299.021264][ T5908]  <TASK>
23:00:08 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (fail_nth: 3)

[  299.021271][ T5908]  dump_stack_lvl+0xcd/0x134
[  299.021299][ T5908]  should_fail.cold+0x5/0xa
[  299.021319][ T5908]  should_failslab+0x5/0x10
[  299.021334][ T5908]  __kmalloc+0x7e/0x350
[  299.021348][ T5908]  ? tomoyo_realpath_from_path+0xc3/0x620
[  299.021379][ T5908]  tomoyo_realpath_from_path+0xc3/0x620
[  299.021395][ T5908]  ? tomoyo_profile+0x42/0x50
[  299.021414][ T5908]  tomoyo_path_number_perm+0x1d5/0x590
[  299.021432][ T5908]  ? tomoyo_path_number_perm+0x18d/0x590
[  299.021452][ T5908]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  299.055002][ T5914] FAULT_INJECTION: forcing a failure.
[  299.055002][ T5914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  299.059829][ T5908]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  299.115004][ T5908]  ? __context_tracking_exit+0xb8/0xe0
[  299.120069][ T5908]  ? __fget_files+0x286/0x470
[  299.124730][ T5908]  security_file_ioctl+0x50/0xb0
[  299.129591][ T5908]  __do_compat_sys_ioctl+0x4e/0x290
[  299.134746][ T5908]  __do_fast_syscall_32+0x65/0xf0
[  299.139699][ T5908]  do_fast_syscall_32+0x2f/0x70
[  299.144520][ T5908]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  299.150755][ T5908] RIP: 0023:0xf7fa4549
[  299.154761][ T5908] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  299.174024][ T5908] RSP: 002b:00000000f7f7e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  299.182429][ T5908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  299.190185][ T5908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  299.198006][ T5908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  299.205829][ T5908] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  299.213639][ T5908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  299.221419][ T5908]  </TASK>
[  299.224192][ T5914] CPU: 1 PID: 5914 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  299.226433][ T5908] ERROR: Out of memory at tomoyo_realpath_from_path.
[  299.235735][ T5914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  299.235747][ T5914] Call Trace:
[  299.235753][ T5914]  <TASK>
[  299.235761][ T5914]  dump_stack_lvl+0xcd/0x134
[  299.235788][ T5914]  should_fail.cold+0x5/0xa
[  299.235808][ T5914]  _copy_from_user+0x2a/0x170
[  299.235927][ T5914]  snd_timer_user_ioctl_compat+0x2e0/0x3e0
[  299.281336][ T5914]  ? snd_timer_user_ioctl+0xb0/0xb0
[  299.287576][ T5914]  ? __fget_files+0x286/0x470
[  299.293589][ T5914]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  299.301565][ T5914]  ? snd_timer_user_ioctl+0xb0/0xb0
[  299.308125][ T5914]  __do_compat_sys_ioctl+0x1c7/0x290
[  299.316102][ T5914]  __do_fast_syscall_32+0x65/0xf0
[  299.322809][ T5914]  do_fast_syscall_32+0x2f/0x70
[  299.329216][ T5914]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  299.337969][ T5914] RIP: 0023:0xf7f7c549
[  299.343972][ T5914] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  299.367028][ T5914] RSP: 002b:00000000f7f775cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  299.375829][ T5914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000403c5404
[  299.385052][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  299.394798][ T5914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  299.403092][ T5914] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  299.413029][ T5914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  299.422459][ T5914]  </TASK>
23:00:09 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (fail_nth: 4)

23:00:09 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 2)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  299.456283][ T5919] FAULT_INJECTION: forcing a failure.
[  299.456283][ T5919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  299.458152][ T5920] FAULT_INJECTION: forcing a failure.
[  299.458152][ T5920] name failslab, interval 1, probability 0, space 0, times 0
[  299.479388][ T5919] CPU: 0 PID: 5919 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  299.502819][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  299.511530][ T5919] Call Trace:
[  299.514807][ T5919]  <TASK>
[  299.517680][ T5919]  dump_stack_lvl+0xcd/0x134
[  299.522198][ T5919]  should_fail.cold+0x5/0xa
[  299.526614][ T5919]  _copy_to_user+0x2a/0x140
[  299.531053][ T5919]  simple_read_from_buffer+0xcc/0x160
[  299.536286][ T5919]  proc_fail_nth_read+0x187/0x220
[  299.541553][ T5919]  ? proc_exe_link+0x1d0/0x1d0
[  299.546517][ T5919]  ? security_file_permission+0xab/0xd0
[  299.551958][ T5919]  ? proc_exe_link+0x1d0/0x1d0
[  299.556622][ T5919]  vfs_read+0x1ef/0x5d0
[  299.560694][ T5919]  ksys_read+0x127/0x250
[  299.564894][ T5919]  ? vfs_write+0xac0/0xac0
[  299.569217][ T5919]  ? syscall_enter_from_user_mode_prepare+0x17/0x40
[  299.576079][ T5919]  __do_fast_syscall_32+0x65/0xf0
[  299.581055][ T5919]  do_fast_syscall_32+0x2f/0x70
[  299.586568][ T5919]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  299.593419][ T5919] RIP: 0023:0xf7f7c549
[  299.597464][ T5919] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  299.617366][ T5919] RSP: 002b:00000000f7f77600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003
[  299.625720][ T5919] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7f77690
[  299.633732][ T5919] RDX: 000000000000000f RSI: 00000000f6f36000 RDI: 0000000000000000
[  299.641553][ T5919] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  299.649454][ T5919] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  299.657474][ T5919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  299.665299][ T5919]  </TASK>
[  299.668266][ T5920] CPU: 1 PID: 5920 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  299.681469][ T5920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  299.692440][ T5920] Call Trace:
[  299.696573][ T5920]  <TASK>
[  299.700285][ T5920]  dump_stack_lvl+0xcd/0x134
[  299.705948][ T5920]  should_fail.cold+0x5/0xa
[  299.711465][ T5920]  should_failslab+0x5/0x10
[  299.717050][ T5920]  __kmalloc+0x7e/0x350
23:00:09 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 2)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:09 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  299.722116][ T5920]  ? tomoyo_encode2.part.0+0xe9/0x3a0
23:00:09 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x2, 0x0)

[  299.727880][ T5920]  tomoyo_encode2.part.0+0xe9/0x3a0
[  299.733483][ T5920]  ? trace_kmalloc+0x32/0xf0
[  299.738198][ T5920]  tomoyo_encode+0x28/0x50
[  299.742769][ T5920]  tomoyo_realpath_from_path+0x186/0x620
[  299.748820][ T5920]  tomoyo_path_number_perm+0x1d5/0x590
[  299.755135][ T5920]  ? tomoyo_path_number_perm+0x18d/0x590
[  299.757667][ T5928] FAULT_INJECTION: forcing a failure.
[  299.757667][ T5928] name failslab, interval 1, probability 0, space 0, times 0
23:00:09 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x10, 0x0)

[  299.761960][ T5920]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  299.762000][ T5920]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  299.762067][ T5920]  ? __context_tracking_exit+0xb8/0xe0
[  299.794700][ T5920]  ? __fget_files+0x286/0x470
[  299.800575][ T5920]  security_file_ioctl+0x50/0xb0
[  299.806647][ T5920]  __do_compat_sys_ioctl+0x4e/0x290
[  299.813231][ T5920]  __do_fast_syscall_32+0x65/0xf0
[  299.819423][ T5920]  do_fast_syscall_32+0x2f/0x70
[  299.825367][ T5920]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  299.832638][ T5920] RIP: 0023:0xf7f01549
[  299.837286][ T5920] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  299.861557][ T5920] RSP: 002b:00000000f7efc5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  299.871730][ T5920] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  299.881484][ T5920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  299.891444][ T5920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  299.901223][ T5920] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  299.910915][ T5920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  299.919894][ T5920]  </TASK>
[  299.923002][ T5928] CPU: 3 PID: 5928 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  299.924244][ T5920] ERROR: Out of memory at tomoyo_realpath_from_path.
[  299.933322][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  299.933336][ T5928] Call Trace:
[  299.933343][ T5928]  <TASK>
[  299.933350][ T5928]  dump_stack_lvl+0xcd/0x134
[  299.933379][ T5928]  should_fail.cold+0x5/0xa
[  299.933399][ T5928]  should_failslab+0x5/0x10
[  299.933419][ T5928]  __kmalloc+0x7e/0x350
[  299.933433][ T5928]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[  299.933452][ T5928]  tomoyo_encode2.part.0+0xe9/0x3a0
[  299.933466][ T5928]  ? trace_kmalloc+0x32/0xf0
[  299.933482][ T5928]  tomoyo_encode+0x28/0x50
[  299.933495][ T5928]  tomoyo_realpath_from_path+0x186/0x620
[  299.933515][ T5928]  tomoyo_path_number_perm+0x1d5/0x590
[  299.933533][ T5928]  ? tomoyo_path_number_perm+0x18d/0x590
[  299.933554][ T5928]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  299.933574][ T5928]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  300.020667][ T5928]  ? __context_tracking_exit+0xb8/0xe0
[  300.026064][ T5928]  ? __fget_files+0x286/0x470
[  300.030637][ T5928]  security_file_ioctl+0x50/0xb0
[  300.035310][ T5928]  __do_compat_sys_ioctl+0x4e/0x290
[  300.040490][ T5928]  __do_fast_syscall_32+0x65/0xf0
[  300.045402][ T5928]  do_fast_syscall_32+0x2f/0x70
[  300.050256][ T5928]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  300.056008][ T5928] RIP: 0023:0xf7f6f549
[  300.059996][ T5928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  300.079375][ T5928] RSP: 002b:00000000f7f495cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  300.087748][ T5928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  300.095760][ T5928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  300.103678][ T5928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.111463][ T5928] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  300.119208][ T5928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.127066][ T5928]  </TASK>
[  300.133326][ T5928] ERROR: Out of memory at tomoyo_realpath_from_path.
23:00:09 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 2)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:09 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0)

[  300.161026][ T5938] FAULT_INJECTION: forcing a failure.
[  300.161026][ T5938] name failslab, interval 1, probability 0, space 0, times 0
23:00:09 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5420, 0x0)

[  300.176025][ T5938] CPU: 2 PID: 5938 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  300.189066][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  300.200057][ T5938] Call Trace:
[  300.204297][ T5938]  <TASK>
[  300.207909][ T5938]  dump_stack_lvl+0xcd/0x134
[  300.213201][ T5938]  should_fail.cold+0x5/0xa
[  300.217949][ T5938]  should_failslab+0x5/0x10
[  300.223399][ T5938]  __kmalloc+0x7e/0x350
[  300.227928][ T5938]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[  300.234702][ T5938]  tomoyo_encode2.part.0+0xe9/0x3a0
[  300.240884][ T5938]  ? trace_kmalloc+0x32/0xf0
[  300.246204][ T5938]  tomoyo_encode+0x28/0x50
[  300.251677][ T5938]  tomoyo_realpath_from_path+0x186/0x620
[  300.258741][ T5938]  tomoyo_path_number_perm+0x1d5/0x590
[  300.265467][ T5938]  ? tomoyo_path_number_perm+0x18d/0x590
[  300.272429][ T5938]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  300.279537][ T5938]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  300.287095][ T5938]  ? __context_tracking_exit+0xb8/0xe0
[  300.294119][ T5938]  ? __fget_files+0x286/0x470
[  300.299967][ T5938]  security_file_ioctl+0x50/0xb0
[  300.306322][ T5938]  __do_compat_sys_ioctl+0x4e/0x290
[  300.313117][ T5938]  __do_fast_syscall_32+0x65/0xf0
[  300.319451][ T5938]  do_fast_syscall_32+0x2f/0x70
[  300.324555][ T5938]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  300.330876][ T5938] RIP: 0023:0xf7fa4549
[  300.334957][ T5938] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  300.354689][ T5938] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  300.363206][ T5938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  300.371070][ T5938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  300.378881][ T5938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.386880][ T5938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  300.396055][ T5938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.404335][ T5938]  </TASK>
[  300.409063][ T5938] ERROR: Out of memory at tomoyo_realpath_from_path.
23:00:10 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 3)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  300.450261][ T5946] FAULT_INJECTION: forcing a failure.
[  300.450261][ T5946] name failslab, interval 1, probability 0, space 0, times 0
[  300.463546][ T5946] CPU: 2 PID: 5946 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  300.476253][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  300.486592][ T5946] Call Trace:
[  300.490672][ T5946]  <TASK>
23:00:10 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 3)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:10 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0)

[  300.494398][ T5946]  dump_stack_lvl+0xcd/0x134
[  300.500472][ T5946]  should_fail.cold+0x5/0xa
[  300.506246][ T5946]  ? __get_vm_area_node+0xed/0x3f0
23:00:10 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5423, 0x0)

[  300.512818][ T5946]  should_failslab+0x5/0x10
[  300.518653][ T5946]  kmem_cache_alloc_node_trace+0x59/0x310
[  300.522496][ T5950] FAULT_INJECTION: forcing a failure.
[  300.522496][ T5950] name failslab, interval 1, probability 0, space 0, times 0
[  300.525477][ T5946]  __get_vm_area_node+0xed/0x3f0
23:00:10 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5450, 0x0)

[  300.525519][ T5946]  __vmalloc_node_range+0x264/0x13c0
[  300.525547][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.558044][ T5946]  ? tomoyo_path_number_perm+0x24e/0x590
[  300.564561][ T5946]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  300.571331][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.576491][ T5946]  ? vfree_atomic+0xe0/0xe0
[  300.580907][ T5946]  ? vfs_fileattr_set+0xbe0/0xbe0
[  300.585835][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.590561][ T5946]  __vmalloc+0x69/0x80
[  300.594518][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.599346][ T5946]  ? kvm_stat_data_open+0x380/0x380
[  300.604476][ T5946]  kvm_dev_ioctl+0x1a4/0x1c70
[  300.609061][ T5946]  ? __context_tracking_exit+0xb8/0xe0
[  300.614319][ T5946]  ? kvm_stat_data_open+0x380/0x380
[  300.619601][ T5946]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  300.625711][ T5946]  ? kvm_stat_data_open+0x380/0x380
[  300.630580][ T5946]  __do_compat_sys_ioctl+0x1c7/0x290
[  300.635763][ T5946]  __do_fast_syscall_32+0x65/0xf0
[  300.640770][ T5946]  do_fast_syscall_32+0x2f/0x70
[  300.645491][ T5946]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  300.651629][ T5946] RIP: 0023:0xf7f01549
[  300.655559][ T5946] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  300.674826][ T5946] RSP: 002b:00000000f7efc5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  300.683224][ T5946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  300.690981][ T5946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  300.698968][ T5946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.706828][ T5946] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  300.714685][ T5946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.722589][ T5946]  </TASK>
[  300.725593][ T5950] CPU: 0 PID: 5950 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  300.728273][ T5946] syz-executor.1: vmalloc error: size 43824, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null)
[  300.738214][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  300.738227][ T5950] Call Trace:
[  300.738233][ T5950]  <TASK>
[  300.738240][ T5950]  dump_stack_lvl+0xcd/0x134
[  300.738266][ T5950]  should_fail.cold+0x5/0xa
[  300.738285][ T5950]  ? __get_vm_area_node+0xed/0x3f0
[  300.738322][ T5950]  should_failslab+0x5/0x10
[  300.738336][ T5950]  kmem_cache_alloc_node_trace+0x59/0x310
[  300.738356][ T5950]  __get_vm_area_node+0xed/0x3f0
[  300.738373][ T5950]  __vmalloc_node_range+0x264/0x13c0
[  300.738408][ T5950]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.738428][ T5950]  ? tomoyo_path_number_perm+0x24e/0x590
[  300.738450][ T5950]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  300.738470][ T5950]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.738491][ T5950]  ? vfree_atomic+0xe0/0xe0
[  300.738505][ T5950]  ? vfs_fileattr_set+0xbe0/0xbe0
[  300.738527][ T5950]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.738544][ T5950]  __vmalloc+0x69/0x80
[  300.738558][ T5950]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  300.738574][ T5950]  ? kvm_stat_data_open+0x380/0x380
[  300.738590][ T5950]  kvm_dev_ioctl+0x1a4/0x1c70
[  300.738609][ T5950]  ? __context_tracking_exit+0xb8/0xe0
[  300.738629][ T5950]  ? kvm_stat_data_open+0x380/0x380
[  300.738650][ T5950]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  300.738666][ T5950]  ? kvm_stat_data_open+0x380/0x380
[  300.738685][ T5950]  __do_compat_sys_ioctl+0x1c7/0x290
[  300.738704][ T5950]  __do_fast_syscall_32+0x65/0xf0
[  300.738724][ T5950]  do_fast_syscall_32+0x2f/0x70
[  300.752606][ T5946] ,cpuset=
[  300.761303][ T5950]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  300.761342][ T5950] RIP: 0023:0xf7f6f549
[  300.761356][ T5950] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  300.761370][ T5950] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  300.761387][ T5950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  300.761396][ T5950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  300.761405][ T5950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.761414][ T5950] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  300.761423][ T5950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.761441][ T5950]  </TASK>
[  300.765001][ T5946] syz1,mems_allowed=0-1
[  300.983826][ T5946] CPU: 1 PID: 5946 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  300.995973][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  301.005356][ T5946] Call Trace:
[  301.008420][ T5946]  <TASK>
[  301.011511][ T5946]  dump_stack_lvl+0xcd/0x134
[  301.016320][ T5946]  warn_alloc.cold+0x9b/0x189
[  301.021362][ T5946]  ? zone_watermark_ok_safe+0x290/0x290
[  301.027198][ T5946]  ? __kasan_kmalloc+0xbd/0xd0
[  301.032090][ T5946]  ? __get_vm_area_node+0x297/0x3f0
[  301.038029][ T5946]  ? __vmalloc_node_range+0xd51/0x13c0
[  301.043955][ T5946]  __vmalloc_node_range+0xe14/0x13c0
[  301.049439][ T5946]  ? tomoyo_path_number_perm+0x24e/0x590
[  301.055236][ T5946]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  301.061240][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.066434][ T5946]  ? vfree_atomic+0xe0/0xe0
[  301.071055][ T5946]  ? vfs_fileattr_set+0xbe0/0xbe0
[  301.076107][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.080994][ T5946]  __vmalloc+0x69/0x80
[  301.084992][ T5946]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.089781][ T5946]  ? kvm_stat_data_open+0x380/0x380
[  301.094912][ T5946]  kvm_dev_ioctl+0x1a4/0x1c70
[  301.099508][ T5946]  ? __context_tracking_exit+0xb8/0xe0
[  301.104905][ T5946]  ? kvm_stat_data_open+0x380/0x380
[  301.110063][ T5946]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  301.116179][ T5946]  ? kvm_stat_data_open+0x380/0x380
[  301.121272][ T5946]  __do_compat_sys_ioctl+0x1c7/0x290
[  301.126406][ T5946]  __do_fast_syscall_32+0x65/0xf0
[  301.131323][ T5946]  do_fast_syscall_32+0x2f/0x70
[  301.136004][ T5946]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  301.142112][ T5946] RIP: 0023:0xf7f01549
[  301.146064][ T5946] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  301.167974][ T5946] RSP: 002b:00000000f7efc5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  301.178254][ T5946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  301.188289][ T5946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  301.197230][ T5946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  301.205972][ T5946] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  301.214671][ T5946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  301.223744][ T5946]  </TASK>
[  301.229394][ T5946] Mem-Info:
[  301.233483][ T5946] active_anon:345 inactive_anon:13547 isolated_anon:0
[  301.233483][ T5946]  active_file:4439 inactive_file:7371 isolated_file:0
[  301.233483][ T5946]  unevictable:768 dirty:0 writeback:0
[  301.233483][ T5946]  slab_reclaimable:16157 slab_unreclaimable:47155
[  301.233483][ T5946]  mapped:13512 shmem:1384 pagetables:478 bounce:0
[  301.233483][ T5946]  kernel_misc_reclaimable:0
[  301.233483][ T5946]  free:168184 free_pcp:6461 free_cma:0
[  301.277251][ T5946] Node 0 active_anon:1192kB inactive_anon:51876kB active_file:17252kB inactive_file:29484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21116kB dirty:0kB writeback:0kB shmem:3816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11264kB pagetables:1488kB all_unreclaimable? no
23:00:11 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 3)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:11 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5451, 0x0)

23:00:11 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 4)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  301.310002][ T5946] Node 1 active_anon:188kB inactive_anon:2312kB active_file:504kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32932kB dirty:0kB writeback:0kB shmem:1720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:1372kB pagetables:424kB all_unreclaimable? no
[  301.326419][ T5960] FAULT_INJECTION: forcing a failure.
[  301.326419][ T5960] name failslab, interval 1, probability 0, space 0, times 0
[  301.345494][ T5946] Node 0 DMA free:9100kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:40kB inactive_anon:3400kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  301.359545][ T5960] CPU: 2 PID: 5960 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  301.385366][ T5962] FAULT_INJECTION: forcing a failure.
[  301.385366][ T5962] name failslab, interval 1, probability 0, space 0, times 0
[  301.387605][ T5946] lowmem_reserve[]: 0 452 452 452 452
23:00:11 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:11 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5452, 0x0)

[  301.387641][ T5946] Node 0 DMA32 free:42472kB boost:0kB min:21856kB low:27320kB high:32784kB reserved_highatomic:0KB active_anon:1152kB inactive_anon:48400kB active_file:17056kB inactive_file:29484kB unevictable:1536kB writepending:0kB present:1032192kB managed:469308kB mlocked:0kB bounce:0kB free_pcp:13356kB local_pcp:3248kB free_cma:0kB
[  301.387688][ T5946] lowmem_reserve[]: 0 0 0 0 0
[  301.387718][ T5946] Node 1 DMA32 free:620876kB boost:0kB min:45000kB low:56248kB high:67496kB reserved_highatomic:0KB active_anon:188kB inactive_anon:2312kB active_file:504kB inactive_file:0kB unevictable:1536kB writepending:0kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:12328kB local_pcp:8192kB free_cma:0kB
[  301.387779][ T5946] lowmem_reserve[]: 0 0 0 0 0
[  301.387807][ T5946] Node 0 DMA: 91*4kB (UM) 70*8kB (UM) 43*16kB (UM) 54*32kB (UM) 26*64kB (UM) 8*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB (U) 0*4096kB = 9100kB
[  301.387930][ T5946] Node 0 DMA32: 344*4kB (UME) 463*8kB (UME) 143*16kB (UME) 57*32kB (UME) 32*64kB (UE) 42*128kB (UME) 23*256kB (UME) 13*512kB (UME) 7*1024kB (UM) 3*2048kB (U) 0*4096kB = 42472kB
[  301.388057][ T5946] Node 1 DMA32: 271*4kB (UME) 230*8kB (UME) 120*16kB (UME) 199*32kB (UME) 64*64kB (UME) 35*128kB (UME) 10*256kB (UE) 7*512kB (UE) 3*1024kB (UM) 11*2048kB (UME) 139*4096kB (UM) = 620876kB
[  301.388245][ T5946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  301.388273][ T5946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  301.388285][ T5946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  301.388297][ T5946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  301.388310][ T5946] 13194 total pagecache pages
[  301.388327][ T5946] 0 pages in swap cache
[  301.388341][ T5946] Swap cache stats: add 0, delete 0, find 0/0
[  301.388350][ T5946] Free swap  = 0kB
[  301.388355][ T5946] Total swap = 0kB
[  301.388360][ T5946] 524155 pages RAM
[  301.388365][ T5946] 0 pages HighMem/MovableOnly
[  301.388370][ T5946] 164283 pages reserved
[  301.388375][ T5946] 0 pages cma reserved
[  301.395709][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  301.395722][ T5960] Call Trace:
[  301.395728][ T5960]  <TASK>
[  301.395735][ T5960]  dump_stack_lvl+0xcd/0x134
[  301.395762][ T5960]  should_fail.cold+0x5/0xa
[  301.395781][ T5960]  should_failslab+0x5/0x10
[  301.395797][ T5960]  kmem_cache_alloc_node+0x65/0x3f0
[  301.395813][ T5960]  ? alloc_vmap_area+0x16f/0x1f00
[  301.395831][ T5960]  alloc_vmap_area+0x16f/0x1f00
[  301.395846][ T5960]  ? kmem_cache_alloc_node_trace+0x46/0x310
[  301.395868][ T5960]  ? free_vmap_area+0x1ac0/0x1ac0
[  301.395883][ T5960]  ? rcu_read_lock_sched_held+0x3a/0x70
[  301.395923][ T5960]  ? trace_kmalloc_node+0x32/0x100
[  301.395940][ T5960]  __get_vm_area_node+0x142/0x3f0
[  301.395958][ T5960]  __vmalloc_node_range+0x264/0x13c0
[  301.395974][ T5960]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.395993][ T5960]  ? tomoyo_path_number_perm+0x24e/0x590
[  301.396015][ T5960]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  301.396036][ T5960]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.714714][ T5960]  ? vfree_atomic+0xe0/0xe0
[  301.720161][ T5960]  ? vfs_fileattr_set+0xbe0/0xbe0
[  301.725643][ T5960]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.731071][ T5960]  __vmalloc+0x69/0x80
[  301.735919][ T5960]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.741423][ T5960]  ? kvm_stat_data_open+0x380/0x380
[  301.746555][ T5960]  kvm_dev_ioctl+0x1a4/0x1c70
[  301.751136][ T5960]  ? __context_tracking_exit+0xb8/0xe0
[  301.756860][ T5960]  ? kvm_stat_data_open+0x380/0x380
[  301.761968][ T5960]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  301.768060][ T5960]  ? kvm_stat_data_open+0x380/0x380
[  301.774356][ T5960]  __do_compat_sys_ioctl+0x1c7/0x290
[  301.780714][ T5960]  __do_fast_syscall_32+0x65/0xf0
[  301.786441][ T5960]  do_fast_syscall_32+0x2f/0x70
[  301.791378][ T5960]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  301.797830][ T5960] RIP: 0023:0xf7f6f549
[  301.801772][ T5960] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  301.821010][ T5960] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  301.829296][ T5960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  301.837259][ T5960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  301.845407][ T5960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  301.853353][ T5960] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  301.861212][ T5960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  301.869093][ T5960]  </TASK>
[  301.872187][ T5962] CPU: 1 PID: 5962 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  301.882872][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  301.891627][ T5962] Call Trace:
[  301.894846][ T5962]  <TASK>
[  301.897730][ T5962]  dump_stack_lvl+0xcd/0x134
[  301.902177][ T5962]  should_fail.cold+0x5/0xa
[  301.906790][ T5962]  ? __get_vm_area_node+0xed/0x3f0
[  301.912211][ T5962]  should_failslab+0x5/0x10
[  301.916889][ T5962]  kmem_cache_alloc_node_trace+0x59/0x310
[  301.922808][ T5962]  __get_vm_area_node+0xed/0x3f0
[  301.927665][ T5962]  __vmalloc_node_range+0x264/0x13c0
[  301.932882][ T5962]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.938235][ T5962]  ? tomoyo_path_number_perm+0x24e/0x590
[  301.944157][ T5962]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  301.949967][ T5962]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.954687][ T5962]  ? vfree_atomic+0xe0/0xe0
[  301.959176][ T5962]  ? vfs_fileattr_set+0xbe0/0xbe0
[  301.964244][ T5962]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.970144][ T5962]  __vmalloc+0x69/0x80
[  301.975580][ T5962]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  301.981612][ T5962]  ? kvm_stat_data_open+0x380/0x380
[  301.988204][ T5962]  kvm_dev_ioctl+0x1a4/0x1c70
[  301.993666][ T5962]  ? __context_tracking_exit+0xb8/0xe0
[  301.999082][ T5962]  ? kvm_stat_data_open+0x380/0x380
[  302.004215][ T5962]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  302.010434][ T5962]  ? kvm_stat_data_open+0x380/0x380
[  302.015460][ T5962]  __do_compat_sys_ioctl+0x1c7/0x290
[  302.020603][ T5962]  __do_fast_syscall_32+0x65/0xf0
[  302.025528][ T5962]  do_fast_syscall_32+0x2f/0x70
[  302.030312][ T5962]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  302.036579][ T5962] RIP: 0023:0xf7fa4549
[  302.040699][ T5962] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  302.059991][ T5962] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  302.068766][ T5962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  302.076753][ T5962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  302.084592][ T5962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  302.092830][ T5962] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  302.101865][ T5962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  302.110566][ T5962]  </TASK>
23:00:11 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 5)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:11 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5460, 0x0)

23:00:11 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 4)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:11 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x54a0, 0x0)

[  302.158911][ T5979] FAULT_INJECTION: forcing a failure.
[  302.158911][ T5979] name failslab, interval 1, probability 0, space 0, times 0
23:00:11 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x54a3, 0x0)

[  302.164780][ T5977] FAULT_INJECTION: forcing a failure.
23:00:11 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x8933, 0x0)

[  302.164780][ T5977] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  302.175572][ T5979] CPU: 3 PID: 5979 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  302.197108][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  302.206278][ T5979] Call Trace:
[  302.209699][ T5979]  <TASK>
[  302.212601][ T5979]  dump_stack_lvl+0xcd/0x134
[  302.218047][ T5979]  should_fail.cold+0x5/0xa
[  302.223480][ T5979]  should_failslab+0x5/0x10
[  302.228982][ T5979]  kmem_cache_alloc_node+0x65/0x3f0
[  302.238599][ T5979]  ? alloc_vmap_area+0x16f/0x1f00
[  302.245004][ T5979]  alloc_vmap_area+0x16f/0x1f00
[  302.251343][ T5979]  ? kmem_cache_alloc_node_trace+0x46/0x310
[  302.260541][ T5979]  ? free_vmap_area+0x1ac0/0x1ac0
[  302.266107][ T5979]  ? rcu_read_lock_sched_held+0x3a/0x70
[  302.271526][ T5979]  ? trace_kmalloc_node+0x32/0x100
[  302.276527][ T5979]  __get_vm_area_node+0x142/0x3f0
[  302.281414][ T5979]  __vmalloc_node_range+0x264/0x13c0
[  302.286556][ T5979]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.291040][ T5979]  ? tomoyo_path_number_perm+0x24e/0x590
[  302.297815][ T5979]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  302.304285][ T5979]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.309316][ T5979]  ? vfree_atomic+0xe0/0xe0
[  302.313725][ T5979]  ? vfs_fileattr_set+0xbe0/0xbe0
[  302.318736][ T5979]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.324148][ T5979]  __vmalloc+0x69/0x80
[  302.329037][ T5979]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.334065][ T5979]  ? kvm_stat_data_open+0x380/0x380
[  302.340271][ T5979]  kvm_dev_ioctl+0x1a4/0x1c70
[  302.344842][ T5979]  ? __context_tracking_exit+0xb8/0xe0
[  302.351202][ T5979]  ? kvm_stat_data_open+0x380/0x380
[  302.356367][ T5979]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  302.363424][ T5979]  ? kvm_stat_data_open+0x380/0x380
[  302.368649][ T5979]  __do_compat_sys_ioctl+0x1c7/0x290
[  302.373798][ T5979]  __do_fast_syscall_32+0x65/0xf0
[  302.378691][ T5979]  do_fast_syscall_32+0x2f/0x70
[  302.383656][ T5979]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  302.389820][ T5979] RIP: 0023:0xf7fa4549
[  302.393943][ T5979] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  302.413289][ T5979] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  302.421845][ T5979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  302.429750][ T5979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  302.437844][ T5979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  302.445685][ T5979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  302.453537][ T5979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  302.461419][ T5979]  </TASK>
[  302.464443][ T5977] CPU: 2 PID: 5977 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  302.474753][ T5977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  302.483292][ T5977] Call Trace:
[  302.486638][ T5977]  <TASK>
[  302.489640][ T5977]  dump_stack_lvl+0xcd/0x134
[  302.494191][ T5977]  should_fail.cold+0x5/0xa
[  302.498688][ T5977]  prepare_alloc_pages+0x17b/0x570
[  302.503772][ T5977]  __alloc_pages+0x12f/0x500
[  302.508299][ T5977]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  302.514957][ T5977]  ? ___slab_alloc+0xc3b/0xf20
[  302.519561][ T5977]  alloc_pages+0x1aa/0x310
[  302.524005][ T5977]  ? memtype_copy_nth_element+0x1b0/0x1b0
[  302.529777][ T5977]  __get_free_pages+0x8/0x40
[  302.534204][ T5977]  kasan_populate_vmalloc_pte+0x25/0x160
[  302.539883][ T5977]  __apply_to_page_range+0x686/0x1030
[  302.545287][ T5977]  ? kasan_poison+0x60/0x60
[  302.549806][ T5977]  alloc_vmap_area+0xb0f/0x1f00
[  302.554514][ T5977]  ? free_vmap_area+0x1ac0/0x1ac0
[  302.559504][ T5977]  ? rcu_read_lock_sched_held+0x3a/0x70
[  302.564975][ T5977]  ? trace_kmalloc_node+0x32/0x100
[  302.570053][ T5977]  __get_vm_area_node+0x142/0x3f0
[  302.575076][ T5977]  __vmalloc_node_range+0x264/0x13c0
[  302.580529][ T5977]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.585466][ T5977]  ? tomoyo_path_number_perm+0x24e/0x590
[  302.591155][ T5977]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  302.596838][ T5977]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.601533][ T5977]  ? vfree_atomic+0xe0/0xe0
[  302.605905][ T5977]  ? vfs_fileattr_set+0xbe0/0xbe0
[  302.611239][ T5977]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.617074][ T5977]  __vmalloc+0x69/0x80
[  302.621080][ T5977]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.625822][ T5977]  ? kvm_stat_data_open+0x380/0x380
[  302.630976][ T5977]  kvm_dev_ioctl+0x1a4/0x1c70
[  302.635500][ T5977]  ? __context_tracking_exit+0xb8/0xe0
[  302.640831][ T5977]  ? kvm_stat_data_open+0x380/0x380
[  302.645896][ T5977]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  302.652329][ T5977]  ? kvm_stat_data_open+0x380/0x380
[  302.657393][ T5977]  __do_compat_sys_ioctl+0x1c7/0x290
[  302.662806][ T5977]  __do_fast_syscall_32+0x65/0xf0
[  302.667677][ T5977]  do_fast_syscall_32+0x2f/0x70
[  302.672459][ T5977]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  302.679063][ T5977] RIP: 0023:0xf7f6f549
[  302.683012][ T5977] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  302.702251][ T5977] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  302.710498][ T5977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  302.718215][ T5977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  302.726000][ T5977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  302.733865][ T5977] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  302.741630][ T5977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  302.749445][ T5977]  </TASK>
23:00:12 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x2, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:12 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x400448c9, 0x0)

23:00:12 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 6)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:12 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 5)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  302.778763][ T5993] FAULT_INJECTION: forcing a failure.
[  302.778763][ T5993] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  302.779264][ T5994] FAULT_INJECTION: forcing a failure.
[  302.779264][ T5994] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  302.802200][ T5993] CPU: 1 PID: 5993 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:12 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x400448dd, 0x0)

23:00:12 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x10, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  302.823053][ T5993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  302.833818][ T5993] Call Trace:
[  302.837872][ T5993]  <TASK>
[  302.841440][ T5993]  dump_stack_lvl+0xcd/0x134
[  302.846353][ T5993]  should_fail.cold+0x5/0xa
23:00:12 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045402, 0x0)

23:00:12 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  302.851004][ T5993]  prepare_alloc_pages+0x17b/0x570
[  302.857083][ T5993]  __alloc_pages+0x12f/0x500
[  302.861956][ T5993]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  302.869908][ T5993]  alloc_pages+0x1aa/0x310
23:00:12 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x400454a4, 0x0)

[  302.876324][ T5993]  ? memtype_copy_nth_element+0x1b0/0x1b0
23:00:12 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5421, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  302.883139][ T5993]  __get_free_pages+0x8/0x40
[  302.888128][ T5993]  kasan_populate_vmalloc_pte+0x25/0x160
[  302.893966][ T5993]  __apply_to_page_range+0x686/0x1030
[  302.899464][ T5993]  ? kasan_poison+0x60/0x60
[  302.904490][ T5993]  alloc_vmap_area+0xb0f/0x1f00
[  302.909981][ T5993]  ? free_vmap_area+0x1ac0/0x1ac0
[  302.915373][ T5993]  ? rcu_read_lock_sched_held+0x3a/0x70
[  302.920850][ T5993]  ? trace_kmalloc_node+0x32/0x100
[  302.925876][ T5993]  __get_vm_area_node+0x142/0x3f0
[  302.930825][ T5993]  __vmalloc_node_range+0x264/0x13c0
[  302.936052][ T5993]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.940801][ T5993]  ? tomoyo_path_number_perm+0x24e/0x590
[  302.946324][ T5993]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  302.952071][ T5993]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.956849][ T5993]  ? vfree_atomic+0xe0/0xe0
[  302.961605][ T5993]  ? vfs_fileattr_set+0xbe0/0xbe0
[  302.966544][ T5993]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.971306][ T5993]  __vmalloc+0x69/0x80
[  302.975298][ T5993]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  302.980034][ T5993]  ? kvm_stat_data_open+0x380/0x380
[  302.985152][ T5993]  kvm_dev_ioctl+0x1a4/0x1c70
[  302.989762][ T5993]  ? __context_tracking_exit+0xb8/0xe0
[  302.996045][ T5993]  ? kvm_stat_data_open+0x380/0x380
[  303.001360][ T5993]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  303.007523][ T5993]  ? kvm_stat_data_open+0x380/0x380
[  303.012669][ T5993]  __do_compat_sys_ioctl+0x1c7/0x290
[  303.017938][ T5993]  __do_fast_syscall_32+0x65/0xf0
[  303.022979][ T5993]  do_fast_syscall_32+0x2f/0x70
[  303.027757][ T5993]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  303.033985][ T5993] RIP: 0023:0xf7fa4549
[  303.038005][ T5993] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  303.057165][ T5993] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  303.065623][ T5993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  303.073528][ T5993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  303.081910][ T5993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.091373][ T5993] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  303.101064][ T5993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  303.108854][ T5993]  </TASK>
[  303.111800][ T5994] CPU: 0 PID: 5994 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  303.122199][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  303.130944][ T5994] Call Trace:
[  303.134481][ T5994]  <TASK>
[  303.137366][ T5994]  dump_stack_lvl+0xcd/0x134
[  303.141933][ T5994]  should_fail.cold+0x5/0xa
[  303.146397][ T5994]  prepare_alloc_pages+0x17b/0x570
[  303.151518][ T5994]  __alloc_pages+0x12f/0x500
[  303.156413][ T5994]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  303.163306][ T5994]  alloc_pages+0x1aa/0x310
[  303.167619][ T5994]  ? memtype_copy_nth_element+0x1b0/0x1b0
[  303.173198][ T5994]  __get_free_pages+0x8/0x40
[  303.177734][ T5994]  kasan_populate_vmalloc_pte+0x25/0x160
[  303.183012][ T5994]  __apply_to_page_range+0x686/0x1030
[  303.188281][ T5994]  ? kasan_poison+0x60/0x60
[  303.192702][ T5994]  alloc_vmap_area+0xb0f/0x1f00
[  303.197483][ T5994]  ? free_vmap_area+0x1ac0/0x1ac0
[  303.202510][ T5994]  ? rcu_read_lock_sched_held+0x3a/0x70
[  303.207966][ T5994]  ? trace_kmalloc_node+0x32/0x100
[  303.212709][ T5994]  __get_vm_area_node+0x142/0x3f0
[  303.217626][ T5994]  __vmalloc_node_range+0x264/0x13c0
[  303.222852][ T5994]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.227630][ T5994]  ? tomoyo_path_number_perm+0x24e/0x590
[  303.233391][ T5994]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  303.239218][ T5994]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.244299][ T5994]  ? vfree_atomic+0xe0/0xe0
[  303.248692][ T5994]  ? vfs_fileattr_set+0xbe0/0xbe0
[  303.253667][ T5994]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.258500][ T5994]  __vmalloc+0x69/0x80
[  303.262505][ T5994]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.267279][ T5994]  ? kvm_stat_data_open+0x380/0x380
[  303.272399][ T5994]  kvm_dev_ioctl+0x1a4/0x1c70
[  303.277091][ T5994]  ? __context_tracking_exit+0xb8/0xe0
[  303.282450][ T5994]  ? kvm_stat_data_open+0x380/0x380
[  303.287470][ T5994]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  303.293475][ T5994]  ? kvm_stat_data_open+0x380/0x380
[  303.298548][ T5994]  __do_compat_sys_ioctl+0x1c7/0x290
[  303.303795][ T5994]  __do_fast_syscall_32+0x65/0xf0
[  303.308711][ T5994]  do_fast_syscall_32+0x2f/0x70
[  303.313522][ T5994]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  303.319665][ T5994] RIP: 0023:0xf7f6f549
[  303.323591][ T5994] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  303.342725][ T5994] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  303.351049][ T5994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  303.358992][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  303.366736][ T5994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.374526][ T5994] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  303.382490][ T5994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  303.390282][ T5994]  </TASK>
23:00:13 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 7)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:13 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5450, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:13 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 6)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x400454ca, 0x0)

[  303.415153][ T6014] FAULT_INJECTION: forcing a failure.
23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40046602, 0x0)

23:00:13 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5451, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  303.415153][ T6014] name failslab, interval 1, probability 0, space 0, times 0
[  303.427093][ T6018] FAULT_INJECTION: forcing a failure.
[  303.427093][ T6018] name failslab, interval 1, probability 0, space 0, times 0
[  303.433918][ T6014] CPU: 3 PID: 6014 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  303.456624][ T6014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  303.467469][ T6014] Call Trace:
[  303.471492][ T6014]  <TASK>
23:00:13 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5452, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  303.474966][ T6014]  dump_stack_lvl+0xcd/0x134
[  303.480955][ T6014]  should_fail.cold+0x5/0xa
[  303.486512][ T6014]  ? __vmalloc_node_range+0x90d/0x13c0
[  303.493201][ T6014]  should_failslab+0x5/0x10
[  303.498732][ T6014]  __kmalloc_node+0x75/0x390
[  303.504564][ T6014]  __vmalloc_node_range+0x90d/0x13c0
[  303.511788][ T6014]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.516591][ T6014]  ? vfree_atomic+0xe0/0xe0
[  303.520681][ T6014]  ? vfs_fileattr_set+0xbe0/0xbe0
[  303.525380][ T6014]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.530097][ T6014]  __vmalloc+0x69/0x80
[  303.534176][ T6014]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.538898][ T6014]  ? kvm_stat_data_open+0x380/0x380
[  303.543939][ T6014]  kvm_dev_ioctl+0x1a4/0x1c70
[  303.548382][ T6014]  ? __context_tracking_exit+0xb8/0xe0
[  303.553585][ T6014]  ? kvm_stat_data_open+0x380/0x380
[  303.558540][ T6014]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  303.564493][ T6014]  ? kvm_stat_data_open+0x380/0x380
[  303.569478][ T6014]  __do_compat_sys_ioctl+0x1c7/0x290
[  303.574640][ T6014]  __do_fast_syscall_32+0x65/0xf0
[  303.579461][ T6014]  do_fast_syscall_32+0x2f/0x70
[  303.584112][ T6014]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  303.590127][ T6014] RIP: 0023:0xf7fa4549
[  303.594017][ T6014] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  303.612635][ T6014] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  303.620591][ T6014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  303.628222][ T6014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  303.635726][ T6014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.643377][ T6014] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  303.651015][ T6014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  303.660402][ T6014]  </TASK>
23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40049409, 0x0)

[  303.663935][ T6018] CPU: 1 PID: 6018 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  303.674152][ T6018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  303.682253][ T6018] Call Trace:
[  303.685609][ T6018]  <TASK>
[  303.688409][ T6018]  dump_stack_lvl+0xcd/0x134
[  303.692562][ T6018]  should_fail.cold+0x5/0xa
[  303.696626][ T6018]  ? __vmalloc_node_range+0x90d/0x13c0
[  303.701563][ T6018]  should_failslab+0x5/0x10
[  303.705465][ T6018]  __kmalloc_node+0x75/0x390
[  303.709624][ T6018]  __vmalloc_node_range+0x90d/0x13c0
[  303.714401][ T6018]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.718821][ T6018]  ? vfree_atomic+0xe0/0xe0
[  303.722861][ T6018]  ? vfs_fileattr_set+0xbe0/0xbe0
[  303.727394][ T6018]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.731767][ T6018]  __vmalloc+0x69/0x80
[  303.735423][ T6018]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.740243][ T6018]  ? kvm_stat_data_open+0x380/0x380
[  303.744945][ T6018]  kvm_dev_ioctl+0x1a4/0x1c70
[  303.749173][ T6018]  ? __context_tracking_exit+0xb8/0xe0
[  303.754088][ T6018]  ? kvm_stat_data_open+0x380/0x380
[  303.758790][ T6018]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  303.764413][ T6018]  ? kvm_stat_data_open+0x380/0x380
[  303.769295][ T6018]  __do_compat_sys_ioctl+0x1c7/0x290
[  303.774771][ T6018]  __do_fast_syscall_32+0x65/0xf0
[  303.779431][ T6018]  do_fast_syscall_32+0x2f/0x70
[  303.783807][ T6018]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  303.789509][ T6018] RIP: 0023:0xf7f6f549
[  303.793330][ T6018] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  303.811260][ T6018] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  303.818766][ T6018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  303.825900][ T6018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  303.833234][ T6018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.840527][ T6018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  303.847752][ T6018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  303.855064][ T6018]  </TASK>
23:00:13 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 8)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:13 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5460, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40086602, 0x0)

23:00:13 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 7)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  303.874956][ T6032] FAULT_INJECTION: forcing a failure.
[  303.874956][ T6032] name failslab, interval 1, probability 0, space 0, times 0
23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40186366, 0x0)

[  303.892302][ T6032] CPU: 1 PID: 6032 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  303.902203][ T6032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  303.910383][ T6032] Call Trace:
[  303.913354][ T6032]  <TASK>
[  303.916055][ T6032]  dump_stack_lvl+0xcd/0x134
[  303.916757][ T6036] FAULT_INJECTION: forcing a failure.
[  303.916757][ T6036] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  303.920197][ T6032]  should_fail.cold+0x5/0xa
[  303.920225][ T6032]  ? __vmalloc_node_range+0x90d/0x13c0
[  303.920245][ T6032]  should_failslab+0x5/0x10
[  303.920259][ T6032]  __kmalloc_node+0x75/0x390
[  303.920278][ T6032]  __vmalloc_node_range+0x90d/0x13c0
[  303.961772][ T6032]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.967736][ T6032]  ? vfree_atomic+0xe0/0xe0
[  303.973029][ T6032]  ? vfs_fileattr_set+0xbe0/0xbe0
[  303.979431][ T6032]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.985671][ T6032]  __vmalloc+0x69/0x80
[  303.990357][ T6032]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  303.996139][ T6032]  ? kvm_stat_data_open+0x380/0x380
[  304.002124][ T6032]  kvm_dev_ioctl+0x1a4/0x1c70
[  304.006716][ T6032]  ? __context_tracking_exit+0xb8/0xe0
[  304.012090][ T6032]  ? kvm_stat_data_open+0x380/0x380
[  304.017401][ T6032]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  304.023606][ T6032]  ? kvm_stat_data_open+0x380/0x380
[  304.028849][ T6032]  __do_compat_sys_ioctl+0x1c7/0x290
[  304.034618][ T6032]  __do_fast_syscall_32+0x65/0xf0
[  304.040785][ T6032]  do_fast_syscall_32+0x2f/0x70
[  304.046765][ T6032]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  304.054487][ T6032] RIP: 0023:0xf7fa4549
[  304.058963][ T6032] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  304.078606][ T6032] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  304.086885][ T6032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  304.094706][ T6032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  304.102501][ T6032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.110386][ T6032] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  304.118215][ T6032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.126111][ T6032]  </TASK>
23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x401c5820, 0x0)

23:00:13 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x4020940d, 0x0)

[  304.129072][ T6036] CPU: 2 PID: 6036 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  304.141018][ T6036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  304.149899][ T6036] Call Trace:
23:00:13 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x8933, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  304.153247][ T6036]  <TASK>
[  304.156384][ T6036]  dump_stack_lvl+0xcd/0x134
[  304.161019][ T6036]  should_fail.cold+0x5/0xa
[  304.165484][ T6036]  prepare_alloc_pages+0x17b/0x570
[  304.170573][ T6036]  __alloc_pages+0x12f/0x500
[  304.175138][ T6036]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  304.181912][ T6036]  ? __kmalloc_node+0x62/0x390
[  304.186567][ T6036]  alloc_pages+0x1aa/0x310
[  304.190925][ T6036]  __vmalloc_node_range+0x8a7/0x13c0
[  304.196203][ T6036]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.200953][ T6036]  ? vfree_atomic+0xe0/0xe0
[  304.205317][ T6036]  ? vfs_fileattr_set+0xbe0/0xbe0
[  304.210215][ T6036]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.214932][ T6036]  __vmalloc+0x69/0x80
[  304.218903][ T6036]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.223654][ T6036]  ? kvm_stat_data_open+0x380/0x380
[  304.228693][ T6036]  kvm_dev_ioctl+0x1a4/0x1c70
[  304.233244][ T6036]  ? __context_tracking_exit+0xb8/0xe0
[  304.238585][ T6036]  ? kvm_stat_data_open+0x380/0x380
[  304.243731][ T6036]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  304.249894][ T6036]  ? kvm_stat_data_open+0x380/0x380
[  304.254844][ T6036]  __do_compat_sys_ioctl+0x1c7/0x290
[  304.259948][ T6036]  __do_fast_syscall_32+0x65/0xf0
[  304.264868][ T6036]  do_fast_syscall_32+0x2f/0x70
[  304.269501][ T6036]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  304.275859][ T6036] RIP: 0023:0xf7f6f549
[  304.279933][ T6036] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  304.299162][ T6036] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  304.307537][ T6036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  304.316636][ T6036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  304.325907][ T6036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.333931][ T6036] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  304.341862][ T6036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.349667][ T6036]  </TASK>
23:00:14 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 9)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:14 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 8)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x402c5828, 0x0)

23:00:14 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae00, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  304.376756][ T6050] FAULT_INJECTION: forcing a failure.
23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x402c5829, 0x0)

[  304.376756][ T6050] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x402c582a, 0x0)

[  304.401345][ T6050] CPU: 1 PID: 6050 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  304.414360][ T6050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  304.416917][ T6056] FAULT_INJECTION: forcing a failure.
[  304.416917][ T6056] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  304.424733][ T6050] Call Trace:
[  304.424748][ T6050]  <TASK>
23:00:14 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae02, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  304.424760][ T6050]  dump_stack_lvl+0xcd/0x134
23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x402c582b, 0x0)

[  304.424802][ T6050]  should_fail.cold+0x5/0xa
[  304.456808][ T6050]  prepare_alloc_pages+0x17b/0x570
[  304.462246][ T6050]  __alloc_pages+0x12f/0x500
[  304.467562][ T6050]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  304.475039][ T6050]  ? __kmalloc_node+0x62/0x390
[  304.480064][ T6050]  alloc_pages+0x1aa/0x310
[  304.485214][ T6050]  __vmalloc_node_range+0x8a7/0x13c0
[  304.491877][ T6050]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.497743][ T6050]  ? vfree_atomic+0xe0/0xe0
[  304.503304][ T6050]  ? vfs_fileattr_set+0xbe0/0xbe0
[  304.509486][ T6050]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.515351][ T6050]  __vmalloc+0x69/0x80
[  304.520228][ T6050]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.525227][ T6050]  ? kvm_stat_data_open+0x380/0x380
[  304.530682][ T6050]  kvm_dev_ioctl+0x1a4/0x1c70
[  304.536423][ T6050]  ? __context_tracking_exit+0xb8/0xe0
[  304.542756][ T6050]  ? kvm_stat_data_open+0x380/0x380
[  304.548815][ T6050]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  304.555508][ T6050]  ? kvm_stat_data_open+0x380/0x380
[  304.561033][ T6050]  __do_compat_sys_ioctl+0x1c7/0x290
[  304.566367][ T6050]  __do_fast_syscall_32+0x65/0xf0
[  304.571208][ T6050]  do_fast_syscall_32+0x2f/0x70
[  304.575985][ T6050]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  304.582145][ T6050] RIP: 0023:0xf7fa4549
[  304.586071][ T6050] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  304.606232][ T6050] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  304.616432][ T6050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  304.626139][ T6050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  304.635842][ T6050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.645580][ T6050] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  304.655352][ T6050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.665185][ T6050]  </TASK>
[  304.668410][ T6056] CPU: 2 PID: 6056 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  304.677927][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  304.685716][ T6056] Call Trace:
[  304.688568][ T6056]  <TASK>
[  304.691328][ T6056]  dump_stack_lvl+0xcd/0x134
[  304.695610][ T6056]  should_fail.cold+0x5/0xa
[  304.699772][ T6056]  prepare_alloc_pages+0x17b/0x570
[  304.704624][ T6056]  __alloc_pages+0x12f/0x500
[  304.708955][ T6056]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  304.715241][ T6056]  ? __kmalloc_node+0x62/0x390
[  304.719587][ T6056]  alloc_pages+0x1aa/0x310
[  304.723613][ T6056]  __vmalloc_node_range+0x8a7/0x13c0
[  304.728445][ T6056]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.732861][ T6056]  ? vfree_atomic+0xe0/0xe0
[  304.736923][ T6056]  ? vfs_fileattr_set+0xbe0/0xbe0
[  304.741378][ T6056]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.745587][ T6056]  __vmalloc+0x69/0x80
[  304.749318][ T6056]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  304.753722][ T6056]  ? kvm_stat_data_open+0x380/0x380
[  304.758410][ T6056]  kvm_dev_ioctl+0x1a4/0x1c70
[  304.762655][ T6056]  ? __context_tracking_exit+0xb8/0xe0
[  304.767682][ T6056]  ? kvm_stat_data_open+0x380/0x380
[  304.772420][ T6056]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  304.777783][ T6056]  ? kvm_stat_data_open+0x380/0x380
[  304.782483][ T6056]  __do_compat_sys_ioctl+0x1c7/0x290
[  304.787282][ T6056]  __do_fast_syscall_32+0x65/0xf0
[  304.791933][ T6056]  do_fast_syscall_32+0x2f/0x70
[  304.796305][ T6056]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  304.801960][ T6056] RIP: 0023:0xf7f6f549
[  304.805625][ T6056] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  304.823143][ T6056] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  304.830719][ T6056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  304.837830][ T6056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  304.845006][ T6056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.852357][ T6056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  304.859824][ T6056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.867279][ T6056]  </TASK>
23:00:14 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 10)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:14 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae03, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x402c5839, 0x0)

23:00:14 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 9)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  304.892323][ T6071] FAULT_INJECTION: forcing a failure.
23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, 0x0)

[  304.892323][ T6071] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:00:14 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae04, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  304.907756][ T6071] CPU: 1 PID: 6071 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  304.919606][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  304.929469][ T6071] Call Trace:
23:00:14 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5402, 0x0)

[  304.933515][ T6071]  <TASK>
[  304.936800][ T6071]  dump_stack_lvl+0xcd/0x134
[  304.941929][ T6071]  should_fail.cold+0x5/0xa
[  304.947217][ T6071]  prepare_alloc_pages+0x17b/0x570
23:00:14 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae05, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  304.953480][ T6071]  ? arch_stack_walk+0x93/0xe0
[  304.956299][ T6075] FAULT_INJECTION: forcing a failure.
[  304.956299][ T6075] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  304.959096][ T6071]  __alloc_pages+0x12f/0x500
[  304.959143][ T6071]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  304.986134][ T6071]  ? stack_trace_save+0x8c/0xc0
[  304.992122][ T6071]  __alloc_pages_bulk+0xbf3/0x1a10
[  304.997134][ T6071]  ? __do_compat_sys_ioctl+0x1c7/0x290
[  305.002454][ T6071]  ? __do_fast_syscall_32+0x65/0xf0
[  305.008043][ T6071]  ? __alloc_pages+0x500/0x500
[  305.012976][ T6071]  ? find_held_lock+0x2d/0x110
[  305.018199][ T6071]  ? __kmalloc_node+0x62/0x390
[  305.023528][ T6071]  alloc_pages_bulk_array_mempolicy+0x1c3/0x4d0
[  305.030433][ T6071]  ? rcu_read_lock_sched_held+0x3a/0x70
[  305.036068][ T6071]  ? trace_kmalloc_node+0x32/0x100
[  305.041035][ T6071]  __vmalloc_node_range+0xd35/0x13c0
[  305.046112][ T6071]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.050858][ T6071]  ? vfree_atomic+0xe0/0xe0
[  305.055189][ T6071]  ? vfs_fileattr_set+0xbe0/0xbe0
[  305.060019][ T6071]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.064765][ T6071]  __vmalloc+0x69/0x80
[  305.068800][ T6071]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.073484][ T6071]  ? kvm_stat_data_open+0x380/0x380
[  305.079172][ T6071]  kvm_dev_ioctl+0x1a4/0x1c70
[  305.083782][ T6071]  ? __context_tracking_exit+0xb8/0xe0
[  305.089126][ T6071]  ? kvm_stat_data_open+0x380/0x380
[  305.094274][ T6071]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  305.100399][ T6071]  ? kvm_stat_data_open+0x380/0x380
[  305.105528][ T6071]  __do_compat_sys_ioctl+0x1c7/0x290
[  305.110678][ T6071]  __do_fast_syscall_32+0x65/0xf0
[  305.115733][ T6071]  do_fast_syscall_32+0x2f/0x70
[  305.120522][ T6071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  305.126603][ T6071] RIP: 0023:0xf7fa4549
[  305.130571][ T6071] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  305.149432][ T6071] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  305.157449][ T6071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  305.165554][ T6071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  305.174357][ T6071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  305.182620][ T6071] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  305.190558][ T6071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  305.198654][ T6071]  </TASK>
[  305.201682][ T6075] CPU: 2 PID: 6075 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  305.212572][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  305.222189][ T6075] Call Trace:
[  305.225569][ T6075]  <TASK>
[  305.228574][ T6075]  dump_stack_lvl+0xcd/0x134
[  305.233280][ T6075]  should_fail.cold+0x5/0xa
[  305.237922][ T6075]  prepare_alloc_pages+0x17b/0x570
[  305.243433][ T6075]  __alloc_pages+0x12f/0x500
[  305.248471][ T6075]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  305.255426][ T6075]  alloc_pages+0x1aa/0x310
[  305.259940][ T6075]  __vmalloc_node_range+0x8a7/0x13c0
[  305.265271][ T6075]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.270289][ T6075]  ? vfree_atomic+0xe0/0xe0
[  305.274857][ T6075]  ? vfs_fileattr_set+0xbe0/0xbe0
[  305.280227][ T6075]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.285262][ T6075]  __vmalloc+0x69/0x80
[  305.289382][ T6075]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.294952][ T6075]  ? kvm_stat_data_open+0x380/0x380
[  305.301158][ T6075]  kvm_dev_ioctl+0x1a4/0x1c70
[  305.306340][ T6075]  ? __context_tracking_exit+0xb8/0xe0
[  305.312147][ T6075]  ? kvm_stat_data_open+0x380/0x380
[  305.318236][ T6075]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  305.324965][ T6075]  ? kvm_stat_data_open+0x380/0x380
[  305.330080][ T6075]  __do_compat_sys_ioctl+0x1c7/0x290
[  305.335771][ T6075]  __do_fast_syscall_32+0x65/0xf0
[  305.341689][ T6075]  do_fast_syscall_32+0x2f/0x70
[  305.347533][ T6075]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  305.354135][ T6075] RIP: 0023:0xf7f6f549
[  305.358669][ T6075] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  305.379373][ T6075] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  305.389273][ T6075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  305.399303][ T6075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  305.409038][ T6075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  305.418435][ T6075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  305.428149][ T6075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  305.438436][ T6075]  </TASK>
23:00:15 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5403, 0x0)

23:00:15 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 11)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:15 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae06, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  305.479954][ T6091] FAULT_INJECTION: forcing a failure.
[  305.479954][ T6091] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  305.494150][ T6091] CPU: 0 PID: 6091 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  305.504539][ T6091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  305.513592][ T6091] Call Trace:
[  305.516991][ T6091]  <TASK>
[  305.520050][ T6091]  dump_stack_lvl+0xcd/0x134
[  305.524706][ T6091]  should_fail.cold+0x5/0xa
[  305.529188][ T6091]  prepare_alloc_pages+0x17b/0x570
[  305.534272][ T6091]  __alloc_pages+0x12f/0x500
[  305.538814][ T6091]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  305.545471][ T6091]  ? __kmalloc_node+0x62/0x390
[  305.550263][ T6091]  alloc_pages+0x1aa/0x310
[  305.554594][ T6091]  __vmalloc_node_range+0x8a7/0x13c0
[  305.559749][ T6091]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.564492][ T6091]  ? vfree_atomic+0xe0/0xe0
[  305.568894][ T6091]  ? vfs_fileattr_set+0xbe0/0xbe0
[  305.573636][ T6091]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.578324][ T6091]  __vmalloc+0x69/0x80
[  305.582357][ T6091]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.587033][ T6091]  ? kvm_stat_data_open+0x380/0x380
[  305.592449][ T6091]  kvm_dev_ioctl+0x1a4/0x1c70
[  305.597029][ T6091]  ? __context_tracking_exit+0xb8/0xe0
[  305.602542][ T6091]  ? kvm_stat_data_open+0x380/0x380
[  305.607743][ T6091]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  305.613682][ T6091]  ? kvm_stat_data_open+0x380/0x380
[  305.618920][ T6091]  __do_compat_sys_ioctl+0x1c7/0x290
[  305.624925][ T6091]  __do_fast_syscall_32+0x65/0xf0
[  305.631017][ T6091]  do_fast_syscall_32+0x2f/0x70
[  305.636897][ T6091]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  305.644416][ T6091] RIP: 0023:0xf7f6f549
[  305.648440][ T6091] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  305.667938][ T6091] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  305.676347][ T6091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  305.684291][ T6091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  305.692235][ T6091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  305.700283][ T6091] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  305.708261][ T6091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  305.716083][ T6091]  </TASK>
23:00:15 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 10)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:15 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5405, 0x0)

23:00:15 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae07, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:15 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 12)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:15 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae08, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  305.753465][ T6097] FAULT_INJECTION: forcing a failure.
23:00:15 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5406, 0x0)

[  305.753465][ T6097] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  305.777711][ T6097] CPU: 1 PID: 6097 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  305.789812][ T6097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  305.796902][ T6099] FAULT_INJECTION: forcing a failure.
23:00:15 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae0b, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  305.796902][ T6099] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  305.799571][ T6097] Call Trace:
[  305.799585][ T6097]  <TASK>
23:00:15 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5407, 0x0)

[  305.799597][ T6097]  dump_stack_lvl+0xcd/0x134
[  305.799639][ T6097]  should_fail.cold+0x5/0xa
[  305.799671][ T6097]  prepare_alloc_pages+0x17b/0x570
[  305.838235][ T6097]  __alloc_pages+0x12f/0x500
[  305.843504][ T6097]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  305.850161][ T6097]  ? __kmalloc_node+0x62/0x390
[  305.854848][ T6097]  alloc_pages+0x1aa/0x310
[  305.859200][ T6097]  __vmalloc_node_range+0x8a7/0x13c0
[  305.864441][ T6097]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.869239][ T6097]  ? vfree_atomic+0xe0/0xe0
[  305.873828][ T6097]  ? vfs_fileattr_set+0xbe0/0xbe0
[  305.878741][ T6097]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.883858][ T6097]  __vmalloc+0x69/0x80
[  305.887921][ T6097]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  305.892769][ T6097]  ? kvm_stat_data_open+0x380/0x380
[  305.897931][ T6097]  kvm_dev_ioctl+0x1a4/0x1c70
[  305.902703][ T6097]  ? __context_tracking_exit+0xb8/0xe0
[  305.908405][ T6097]  ? kvm_stat_data_open+0x380/0x380
[  305.913566][ T6097]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  305.919702][ T6097]  ? kvm_stat_data_open+0x380/0x380
[  305.924810][ T6097]  __do_compat_sys_ioctl+0x1c7/0x290
[  305.929985][ T6097]  __do_fast_syscall_32+0x65/0xf0
[  305.934868][ T6097]  do_fast_syscall_32+0x2f/0x70
[  305.939948][ T6097]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  305.946171][ T6097] RIP: 0023:0xf7fa4549
[  305.950181][ T6097] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  305.970034][ T6097] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  305.980239][ T6097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  305.990155][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  306.000224][ T6097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  306.010187][ T6097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  306.019808][ T6097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  306.028669][ T6097]  </TASK>
[  306.031633][ T6099] CPU: 0 PID: 6099 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:15 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 11)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:15 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5408, 0x0)

23:00:15 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae83, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  306.041837][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  306.050934][ T6099] Call Trace:
[  306.054149][ T6099]  <TASK>
[  306.057168][ T6099]  dump_stack_lvl+0xcd/0x134
[  306.061717][ T6099]  should_fail.cold+0x5/0xa
[  306.066821][ T6112] FAULT_INJECTION: forcing a failure.
[  306.066821][ T6112] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  306.067312][ T6099]  prepare_alloc_pages+0x17b/0x570
[  306.086818][ T6099]  __alloc_pages+0x12f/0x500
[  306.092274][ T6099]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  306.099839][ T6099]  ? __kmalloc_node+0x62/0x390
[  306.104664][ T6099]  alloc_pages+0x1aa/0x310
[  306.109117][ T6099]  __vmalloc_node_range+0x8a7/0x13c0
[  306.114413][ T6099]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.119187][ T6099]  ? vfree_atomic+0xe0/0xe0
[  306.123596][ T6099]  ? vfs_fileattr_set+0xbe0/0xbe0
[  306.128781][ T6099]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.133567][ T6099]  __vmalloc+0x69/0x80
[  306.137682][ T6099]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.142444][ T6099]  ? kvm_stat_data_open+0x380/0x380
[  306.147583][ T6099]  kvm_dev_ioctl+0x1a4/0x1c70
[  306.152260][ T6099]  ? __context_tracking_exit+0xb8/0xe0
[  306.157695][ T6099]  ? kvm_stat_data_open+0x380/0x380
[  306.162817][ T6099]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  306.168979][ T6099]  ? kvm_stat_data_open+0x380/0x380
[  306.174411][ T6099]  __do_compat_sys_ioctl+0x1c7/0x290
[  306.180878][ T6099]  __do_fast_syscall_32+0x65/0xf0
[  306.186936][ T6099]  do_fast_syscall_32+0x2f/0x70
[  306.192723][ T6099]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  306.198960][ T6099] RIP: 0023:0xf7f6f549
[  306.202975][ T6099] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  306.223163][ T6099] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  306.233486][ T6099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  306.243229][ T6099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  306.252293][ T6099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  306.261875][ T6099] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  306.271682][ T6099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  306.281459][ T6099]  </TASK>
[  306.285321][ T6112] CPU: 1 PID: 6112 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  306.297457][ T6112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  306.309188][ T6112] Call Trace:
[  306.313353][ T6112]  <TASK>
[  306.316941][ T6112]  dump_stack_lvl+0xcd/0x134
[  306.322742][ T6112]  should_fail.cold+0x5/0xa
[  306.328301][ T6112]  prepare_alloc_pages+0x17b/0x570
[  306.333384][ T6112]  __alloc_pages+0x12f/0x500
[  306.338041][ T6112]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  306.344814][ T6112]  alloc_pages+0x1aa/0x310
[  306.349329][ T6112]  __vmalloc_node_range+0x8a7/0x13c0
[  306.354492][ T6112]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.359234][ T6112]  ? vfree_atomic+0xe0/0xe0
[  306.363733][ T6112]  ? vfs_fileattr_set+0xbe0/0xbe0
[  306.368669][ T6112]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.373448][ T6112]  __vmalloc+0x69/0x80
[  306.377460][ T6112]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.382216][ T6112]  ? kvm_stat_data_open+0x380/0x380
[  306.387336][ T6112]  kvm_dev_ioctl+0x1a4/0x1c70
[  306.391969][ T6112]  ? __context_tracking_exit+0xb8/0xe0
[  306.397301][ T6112]  ? kvm_stat_data_open+0x380/0x380
[  306.402435][ T6112]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  306.408555][ T6112]  ? kvm_stat_data_open+0x380/0x380
[  306.413840][ T6112]  __do_compat_sys_ioctl+0x1c7/0x290
[  306.418972][ T6112]  __do_fast_syscall_32+0x65/0xf0
[  306.423862][ T6112]  do_fast_syscall_32+0x2f/0x70
[  306.428774][ T6112]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  306.434974][ T6112] RIP: 0023:0xf7fa4549
23:00:16 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 13)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:16 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae87, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5409, 0x0)

[  306.438983][ T6112] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  306.459657][ T6112] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c540a, 0x0)

[  306.468237][ T6112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  306.476991][ T6112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  306.486548][ T6112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  306.493657][ T6123] FAULT_INJECTION: forcing a failure.
[  306.493657][ T6123] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:00:16 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 12)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:16 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x400448c9, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  306.494738][ T6112] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  306.494753][ T6112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c540b, 0x0)

[  306.494773][ T6112]  </TASK>
[  306.529963][ T6128] FAULT_INJECTION: forcing a failure.
[  306.529963][ T6128] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  306.533308][ T6123] CPU: 3 PID: 6123 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  306.558326][ T6123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c540c, 0x0)

[  306.569031][ T6123] Call Trace:
[  306.573372][ T6123]  <TASK>
[  306.576850][ T6123]  dump_stack_lvl+0xcd/0x134
[  306.582383][ T6123]  should_fail.cold+0x5/0xa
[  306.586811][ T6123]  prepare_alloc_pages+0x17b/0x570
[  306.592094][ T6123]  __alloc_pages+0x12f/0x500
[  306.596279][ T6123]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  306.603017][ T6123]  alloc_pages+0x1aa/0x310
[  306.608016][ T6123]  __vmalloc_node_range+0x8a7/0x13c0
[  306.615326][ T6123]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.620702][ T6123]  ? vfree_atomic+0xe0/0xe0
[  306.625456][ T6123]  ? vfs_fileattr_set+0xbe0/0xbe0
[  306.631463][ T6123]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.637378][ T6123]  __vmalloc+0x69/0x80
[  306.642405][ T6123]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.648003][ T6123]  ? kvm_stat_data_open+0x380/0x380
[  306.653655][ T6123]  kvm_dev_ioctl+0x1a4/0x1c70
[  306.658334][ T6123]  ? __context_tracking_exit+0xb8/0xe0
[  306.664928][ T6123]  ? kvm_stat_data_open+0x380/0x380
[  306.671101][ T6123]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  306.678532][ T6123]  ? kvm_stat_data_open+0x380/0x380
[  306.683936][ T6123]  __do_compat_sys_ioctl+0x1c7/0x290
[  306.689004][ T6123]  __do_fast_syscall_32+0x65/0xf0
[  306.693907][ T6123]  do_fast_syscall_32+0x2f/0x70
[  306.699219][ T6123]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  306.706115][ T6123] RIP: 0023:0xf7f6f549
[  306.710167][ T6123] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  306.730174][ T6123] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  306.738507][ T6123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  306.746403][ T6123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  306.754713][ T6123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  306.763010][ T6123] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  306.771530][ T6123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  306.780918][ T6123]  </TASK>
[  306.783896][ T6128] CPU: 1 PID: 6128 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  306.794367][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  306.803292][ T6128] Call Trace:
[  306.806591][ T6128]  <TASK>
[  306.809524][ T6128]  dump_stack_lvl+0xcd/0x134
23:00:16 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 14)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:16 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x400448dd, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c540d, 0x0)

[  306.814126][ T6128]  should_fail.cold+0x5/0xa
[  306.818975][ T6128]  prepare_alloc_pages+0x17b/0x570
[  306.824497][ T6128]  __alloc_pages+0x12f/0x500
23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c540e, 0x0)

[  306.829902][ T6128]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  306.838189][ T6128]  ? __kmalloc_node+0x62/0x390
[  306.843812][ T6128]  alloc_pages+0x1aa/0x310
[  306.848869][ T6128]  __vmalloc_node_range+0x8a7/0x13c0
[  306.854839][ T6128]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.859744][ T6128]  ? vfree_atomic+0xe0/0xe0
[  306.864880][ T6128]  ? vfs_fileattr_set+0xbe0/0xbe0
[  306.870170][ T6128]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.873840][ T6144] FAULT_INJECTION: forcing a failure.
[  306.873840][ T6144] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  306.875649][ T6128]  __vmalloc+0x69/0x80
[  306.875681][ T6128]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  306.875707][ T6128]  ? kvm_stat_data_open+0x380/0x380
[  306.875740][ T6128]  kvm_dev_ioctl+0x1a4/0x1c70
[  306.875768][ T6128]  ? __context_tracking_exit+0xb8/0xe0
[  306.875800][ T6128]  ? kvm_stat_data_open+0x380/0x380
[  306.919173][ T6128]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  306.925711][ T6128]  ? kvm_stat_data_open+0x380/0x380
[  306.931438][ T6128]  __do_compat_sys_ioctl+0x1c7/0x290
[  306.937620][ T6128]  __do_fast_syscall_32+0x65/0xf0
[  306.943021][ T6128]  do_fast_syscall_32+0x2f/0x70
[  306.948491][ T6128]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  306.955495][ T6128] RIP: 0023:0xf7fa4549
[  306.960279][ T6128] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  306.983170][ T6128] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  306.991938][ T6128] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  306.999592][ T6128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  307.007761][ T6128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.016212][ T6128] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  307.024508][ T6128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.033131][ T6128]  </TASK>
[  307.036463][ T6144] CPU: 0 PID: 6144 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:16 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 13)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:16 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x400454ca, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:16 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c540f, 0x0)

[  307.050855][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  307.060973][ T6144] Call Trace:
[  307.064647][ T6144]  <TASK>
[  307.067577][ T6144]  dump_stack_lvl+0xcd/0x134
[  307.072152][ T6144]  should_fail.cold+0x5/0xa
[  307.076939][ T6144]  prepare_alloc_pages+0x17b/0x570
23:00:16 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x40046602, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  307.082005][ T6144]  __alloc_pages+0x12f/0x500
[  307.087806][ T6144]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  307.094877][ T6144]  alloc_pages+0x1aa/0x310
[  307.100410][ T6144]  __vmalloc_node_range+0x8a7/0x13c0
[  307.106581][ T6144]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.111615][ T6144]  ? vfree_atomic+0xe0/0xe0
[  307.116705][ T6144]  ? vfs_fileattr_set+0xbe0/0xbe0
[  307.122037][ T6144]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.127336][ T6144]  __vmalloc+0x69/0x80
[  307.131704][ T6144]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.136840][ T6144]  ? kvm_stat_data_open+0x380/0x380
[  307.141053][ T6153] FAULT_INJECTION: forcing a failure.
[  307.141053][ T6153] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  307.142384][ T6144]  kvm_dev_ioctl+0x1a4/0x1c70
[  307.160865][ T6144]  ? __context_tracking_exit+0xb8/0xe0
[  307.166393][ T6144]  ? kvm_stat_data_open+0x380/0x380
[  307.171568][ T6144]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  307.177806][ T6144]  ? kvm_stat_data_open+0x380/0x380
[  307.182919][ T6144]  __do_compat_sys_ioctl+0x1c7/0x290
[  307.188144][ T6144]  __do_fast_syscall_32+0x65/0xf0
[  307.193146][ T6144]  do_fast_syscall_32+0x2f/0x70
[  307.198155][ T6144]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  307.204814][ T6144] RIP: 0023:0xf7f6f549
[  307.208714][ T6144] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  307.228107][ T6144] RSP: 002b:00000000f7f495cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  307.236988][ T6144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  307.245271][ T6144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  307.253782][ T6144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.263149][ T6144] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  307.271054][ T6144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.278926][ T6144]  </TASK>
[  307.281925][ T6153] CPU: 1 PID: 6153 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  307.294226][ T6153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  307.304617][ T6153] Call Trace:
[  307.308444][ T6153]  <TASK>
[  307.311871][ T6153]  dump_stack_lvl+0xcd/0x134
[  307.317345][ T6153]  should_fail.cold+0x5/0xa
[  307.322617][ T6153]  prepare_alloc_pages+0x17b/0x570
[  307.328610][ T6153]  __alloc_pages+0x12f/0x500
[  307.334092][ T6153]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  307.341858][ T6153]  ? __kmalloc_node+0x62/0x390
[  307.347622][ T6153]  alloc_pages+0x1aa/0x310
[  307.352808][ T6153]  __vmalloc_node_range+0x8a7/0x13c0
[  307.358361][ T6159] FAULT_INJECTION: forcing a failure.
[  307.358361][ T6159] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:00:17 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 15)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5410, 0x0)

23:00:17 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x40049409, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5411, 0x0)

[  307.358743][ T6153]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.358784][ T6153]  ? vfree_atomic+0xe0/0xe0
[  307.358808][ T6153]  ? vfs_fileattr_set+0xbe0/0xbe0
[  307.388595][ T6153]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.394097][ T6153]  __vmalloc+0x69/0x80
[  307.398696][ T6153]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.403954][ T6153]  ? kvm_stat_data_open+0x380/0x380
[  307.409380][ T6153]  kvm_dev_ioctl+0x1a4/0x1c70
[  307.414625][ T6153]  ? __context_tracking_exit+0xb8/0xe0
[  307.420716][ T6153]  ? kvm_stat_data_open+0x380/0x380
[  307.426508][ T6153]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  307.433460][ T6153]  ? kvm_stat_data_open+0x380/0x380
[  307.439258][ T6153]  __do_compat_sys_ioctl+0x1c7/0x290
[  307.445199][ T6153]  __do_fast_syscall_32+0x65/0xf0
[  307.450747][ T6153]  do_fast_syscall_32+0x2f/0x70
[  307.456236][ T6153]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  307.463356][ T6153] RIP: 0023:0xf7fa4549
[  307.467925][ T6153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  307.489326][ T6153] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  307.498739][ T6153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  307.507547][ T6153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  307.516414][ T6153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.525374][ T6153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  307.534385][ T6153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.543343][ T6153]  </TASK>
[  307.546792][ T6159] CPU: 2 PID: 6159 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  307.557147][ T6159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  307.566088][ T6159] Call Trace:
[  307.569503][ T6159]  <TASK>
[  307.572248][ T6159]  dump_stack_lvl+0xcd/0x134
[  307.576757][ T6159]  should_fail.cold+0x5/0xa
[  307.581165][ T6159]  prepare_alloc_pages+0x17b/0x570
[  307.586488][ T6159]  __alloc_pages+0x12f/0x500
[  307.590951][ T6159]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  307.597669][ T6159]  alloc_pages+0x1aa/0x310
[  307.598454][ T6169] FAULT_INJECTION: forcing a failure.
[  307.598454][ T6169] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  307.602534][ T6159]  __vmalloc_node_range+0x8a7/0x13c0
[  307.602566][ T6159]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.602596][ T6159]  ? vfree_atomic+0xe0/0xe0
[  307.602611][ T6159]  ? vfs_fileattr_set+0xbe0/0xbe0
[  307.602633][ T6159]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.640284][ T6159]  __vmalloc+0x69/0x80
[  307.644786][ T6159]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.649515][ T6159]  ? kvm_stat_data_open+0x380/0x380
[  307.654563][ T6159]  kvm_dev_ioctl+0x1a4/0x1c70
[  307.659132][ T6159]  ? __context_tracking_exit+0xb8/0xe0
[  307.664528][ T6159]  ? kvm_stat_data_open+0x380/0x380
[  307.669836][ T6159]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  307.675966][ T6159]  ? kvm_stat_data_open+0x380/0x380
[  307.681100][ T6159]  __do_compat_sys_ioctl+0x1c7/0x290
[  307.686243][ T6159]  __do_fast_syscall_32+0x65/0xf0
[  307.691158][ T6159]  do_fast_syscall_32+0x2f/0x70
[  307.695958][ T6159]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
23:00:17 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 14)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:17 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x40086602, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5412, 0x0)

23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5413, 0x0)

[  307.702164][ T6159] RIP: 0023:0xf7f6f549
[  307.706403][ T6159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  307.725962][ T6159] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  307.734365][ T6159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  307.742260][ T6159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  307.750061][ T6159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.758231][ T6159] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  307.765957][ T6159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.774687][ T6159]  </TASK>
[  307.777741][ T6169] CPU: 1 PID: 6169 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  307.788949][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
23:00:17 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 16)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:17 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x4008ae06, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40505412, 0x0)

[  307.798314][ T6169] Call Trace:
[  307.802108][ T6169]  <TASK>
[  307.805334][ T6169]  dump_stack_lvl+0xcd/0x134
[  307.809923][ T6169]  should_fail.cold+0x5/0xa
[  307.814516][ T6169]  prepare_alloc_pages+0x17b/0x570
[  307.817228][ T6174] FAULT_INJECTION: forcing a failure.
[  307.817228][ T6174] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  307.821155][ T6169]  __alloc_pages+0x12f/0x500
[  307.821182][ T6169]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  307.821213][ T6169]  alloc_pages+0x1aa/0x310
[  307.821231][ T6169]  __vmalloc_node_range+0x8a7/0x13c0
[  307.864047][ T6169]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.869942][ T6169]  ? vfree_atomic+0xe0/0xe0
[  307.875777][ T6169]  ? vfs_fileattr_set+0xbe0/0xbe0
[  307.882869][ T6169]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.888870][ T6169]  __vmalloc+0x69/0x80
[  307.893717][ T6169]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  307.898576][ T6169]  ? kvm_stat_data_open+0x380/0x380
23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40585414, 0x0)

[  307.905290][ T6169]  kvm_dev_ioctl+0x1a4/0x1c70
[  307.911320][ T6169]  ? __context_tracking_exit+0xb8/0xe0
[  307.918430][ T6169]  ? kvm_stat_data_open+0x380/0x380
[  307.925367][ T6169]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  307.933520][ T6169]  ? kvm_stat_data_open+0x380/0x380
[  307.938677][ T6169]  __do_compat_sys_ioctl+0x1c7/0x290
[  307.943894][ T6169]  __do_fast_syscall_32+0x65/0xf0
[  307.948838][ T6169]  do_fast_syscall_32+0x2f/0x70
[  307.953861][ T6169]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  307.960113][ T6169] RIP: 0023:0xf7fa4549
[  307.964072][ T6169] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  307.988093][ T6169] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  307.998473][ T6169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  308.008196][ T6169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  308.017547][ T6169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.026191][ T6169] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  308.035489][ T6169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.044087][ T6169]  </TASK>
[  308.047105][ T6174] CPU: 0 PID: 6174 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  308.057611][ T6174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  308.066356][ T6174] Call Trace:
23:00:17 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 15)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40605414, 0x0)

23:00:17 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x40186366, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  308.069598][ T6174]  <TASK>
[  308.073043][ T6174]  dump_stack_lvl+0xcd/0x134
[  308.078335][ T6174]  should_fail.cold+0x5/0xa
[  308.083014][ T6174]  prepare_alloc_pages+0x17b/0x570
23:00:17 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80045400, 0x0)

[  308.088245][ T6174]  __alloc_pages+0x12f/0x500
[  308.091409][ T6187] FAULT_INJECTION: forcing a failure.
[  308.091409][ T6187] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  308.093462][ T6174]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  308.116722][ T6174]  ? __kmalloc_node+0x62/0x390
[  308.121345][ T6174]  alloc_pages+0x1aa/0x310
[  308.125896][ T6174]  __vmalloc_node_range+0x8a7/0x13c0
[  308.132678][ T6174]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.137921][ T6174]  ? vfree_atomic+0xe0/0xe0
[  308.143225][ T6174]  ? vfs_fileattr_set+0xbe0/0xbe0
[  308.148851][ T6174]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.154076][ T6174]  __vmalloc+0x69/0x80
[  308.159106][ T6174]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.165043][ T6174]  ? kvm_stat_data_open+0x380/0x380
[  308.171329][ T6174]  kvm_dev_ioctl+0x1a4/0x1c70
[  308.177060][ T6174]  ? __context_tracking_exit+0xb8/0xe0
[  308.183739][ T6174]  ? kvm_stat_data_open+0x380/0x380
[  308.190123][ T6174]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  308.196897][ T6174]  ? kvm_stat_data_open+0x380/0x380
[  308.203045][ T6174]  __do_compat_sys_ioctl+0x1c7/0x290
[  308.209530][ T6174]  __do_fast_syscall_32+0x65/0xf0
[  308.215644][ T6174]  do_fast_syscall_32+0x2f/0x70
[  308.221426][ T6174]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  308.229066][ T6174] RIP: 0023:0xf7f6f549
[  308.234334][ T6174] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  308.258073][ T6174] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  308.267243][ T6174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  308.276743][ T6174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  308.286361][ T6174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.296373][ T6174] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  308.306186][ T6174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.316673][ T6174]  </TASK>
[  308.319751][ T6187] CPU: 2 PID: 6187 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  308.330428][ T6187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  308.339018][ T6187] Call Trace:
[  308.342935][ T6187]  <TASK>
[  308.345808][ T6187]  dump_stack_lvl+0xcd/0x134
[  308.350295][ T6187]  should_fail.cold+0x5/0xa
[  308.355609][ T6187]  prepare_alloc_pages+0x17b/0x570
[  308.361057][ T6187]  __alloc_pages+0x12f/0x500
[  308.366791][ T6187]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  308.374483][ T6187]  alloc_pages+0x1aa/0x310
[  308.375548][ T6195] FAULT_INJECTION: forcing a failure.
23:00:18 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 17)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x401c5820, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80046601, 0x0)

23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80086301, 0x0)

[  308.375548][ T6195] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  308.378990][ T6187]  __vmalloc_node_range+0x8a7/0x13c0
[  308.379019][ T6187]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.379044][ T6187]  ? vfree_atomic+0xe0/0xe0
[  308.379058][ T6187]  ? vfs_fileattr_set+0xbe0/0xbe0
[  308.411778][ T6187]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.416813][ T6187]  __vmalloc+0x69/0x80
[  308.420772][ T6187]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.425476][ T6187]  ? kvm_stat_data_open+0x380/0x380
[  308.430737][ T6187]  kvm_dev_ioctl+0x1a4/0x1c70
[  308.435282][ T6187]  ? __context_tracking_exit+0xb8/0xe0
[  308.440781][ T6187]  ? kvm_stat_data_open+0x380/0x380
[  308.446912][ T6187]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  308.453436][ T6187]  ? kvm_stat_data_open+0x380/0x380
[  308.458888][ T6187]  __do_compat_sys_ioctl+0x1c7/0x290
[  308.464111][ T6187]  __do_fast_syscall_32+0x65/0xf0
[  308.469222][ T6187]  do_fast_syscall_32+0x2f/0x70
[  308.474415][ T6187]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  308.481758][ T6187] RIP: 0023:0xf7fa4549
[  308.486356][ T6187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  308.505838][ T6187] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  308.516169][ T6187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  308.525969][ T6187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  308.535686][ T6187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.544100][ T6187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  308.553918][ T6187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.563563][ T6187]  </TASK>
[  308.566645][ T6195] CPU: 3 PID: 6195 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  308.577178][ T6195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  308.586152][ T6195] Call Trace:
[  308.589443][ T6195]  <TASK>
23:00:18 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 16)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x4020940d, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  308.592450][ T6195]  dump_stack_lvl+0xcd/0x134
[  308.597170][ T6195]  should_fail.cold+0x5/0xa
[  308.601610][ T6195]  prepare_alloc_pages+0x17b/0x570
[  308.606635][ T6195]  __alloc_pages+0x12f/0x500
[  308.611157][ T6195]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  308.617959][ T6195]  alloc_pages+0x1aa/0x310
[  308.622311][ T6195]  __vmalloc_node_range+0x8a7/0x13c0
[  308.627572][ T6195]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.632370][ T6195]  ? vfree_atomic+0xe0/0xe0
[  308.636842][ T6195]  ? vfs_fileattr_set+0xbe0/0xbe0
[  308.640163][ T6205] FAULT_INJECTION: forcing a failure.
[  308.640163][ T6205] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  308.642163][ T6195]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.660051][ T6195]  __vmalloc+0x69/0x80
23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x402c5828, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x402c5829, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  308.664123][ T6195]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.668994][ T6195]  ? kvm_stat_data_open+0x380/0x380
[  308.674235][ T6195]  kvm_dev_ioctl+0x1a4/0x1c70
[  308.678840][ T6195]  ? __context_tracking_exit+0xb8/0xe0
[  308.684271][ T6195]  ? kvm_stat_data_open+0x380/0x380
[  308.689449][ T6195]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  308.695568][ T6195]  ? kvm_stat_data_open+0x380/0x380
[  308.701068][ T6195]  __do_compat_sys_ioctl+0x1c7/0x290
[  308.706389][ T6195]  __do_fast_syscall_32+0x65/0xf0
[  308.711397][ T6195]  do_fast_syscall_32+0x2f/0x70
[  308.716256][ T6195]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  308.722476][ T6195] RIP: 0023:0xf7f6f549
[  308.726489][ T6195] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  308.745762][ T6195] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  308.754105][ T6195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  308.761918][ T6195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  308.769465][ T6195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.777294][ T6195] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  308.785174][ T6195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.793085][ T6195]  </TASK>
[  308.796095][ T6205] CPU: 2 PID: 6205 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  308.806549][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  308.815559][ T6205] Call Trace:
[  308.818791][ T6205]  <TASK>
[  308.821673][ T6205]  dump_stack_lvl+0xcd/0x134
23:00:18 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 18)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80086601, 0x0)

[  308.826185][ T6205]  should_fail.cold+0x5/0xa
[  308.830966][ T6205]  prepare_alloc_pages+0x17b/0x570
23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x402c582a, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  308.836091][ T6205]  __alloc_pages+0x12f/0x500
[  308.841683][ T6205]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x801c581f, 0x0)

[  308.848414][ T6205]  alloc_pages+0x1aa/0x310
[  308.852878][ T6205]  __vmalloc_node_range+0x8a7/0x13c0
[  308.858114][ T6205]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.862685][ T6205]  ? vfree_atomic+0xe0/0xe0
[  308.867051][ T6205]  ? vfs_fileattr_set+0xbe0/0xbe0
[  308.872639][ T6205]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.878163][ T6205]  __vmalloc+0x69/0x80
[  308.882428][ T6205]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  308.887026][ T6205]  ? kvm_stat_data_open+0x380/0x380
[  308.892320][ T6205]  kvm_dev_ioctl+0x1a4/0x1c70
[  308.897119][ T6205]  ? __context_tracking_exit+0xb8/0xe0
[  308.902495][ T6205]  ? kvm_stat_data_open+0x380/0x380
[  308.907740][ T6205]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  308.911736][ T6219] FAULT_INJECTION: forcing a failure.
[  308.911736][ T6219] name failslab, interval 1, probability 0, space 0, times 0
[  308.913536][ T6205]  ? kvm_stat_data_open+0x380/0x380
[  308.913561][ T6205]  __do_compat_sys_ioctl+0x1c7/0x290
[  308.913584][ T6205]  __do_fast_syscall_32+0x65/0xf0
[  308.913621][ T6205]  do_fast_syscall_32+0x2f/0x70
[  308.913640][ T6205]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  308.913661][ T6205] RIP: 0023:0xf7fa4549
[  308.913674][ T6205] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  308.980495][ T6205] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  308.989301][ T6205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  308.997937][ T6205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.005658][ T6205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.013400][ T6205] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  309.021203][ T6205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  309.028912][ T6205]  </TASK>
[  309.031866][ T6219] CPU: 0 PID: 6219 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  309.043630][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  309.052614][ T6219] Call Trace:
[  309.056183][ T6219]  <TASK>
[  309.059042][ T6219]  dump_stack_lvl+0xcd/0x134
23:00:18 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 17)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80e05411, 0x0)

23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x402c582b, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  309.064582][ T6219]  should_fail.cold+0x5/0xa
[  309.069496][ T6219]  should_failslab+0x5/0x10
[  309.075472][ T6219]  kmem_cache_alloc_trace+0x60/0x3f0
23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0045878, 0x0)

[  309.081984][ T6219]  ? kvm_dev_ioctl+0xb49/0x1c70
[  309.088109][ T6219]  kvm_dev_ioctl+0xb49/0x1c70
[  309.094707][ T6219]  ? kvm_stat_data_open+0x380/0x380
[  309.101483][ T6219]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  309.109867][ T6219]  ? kvm_stat_data_open+0x380/0x380
[  309.112115][ T6226] FAULT_INJECTION: forcing a failure.
[  309.112115][ T6226] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  309.117025][ T6219]  __do_compat_sys_ioctl+0x1c7/0x290
[  309.117071][ T6219]  __do_fast_syscall_32+0x65/0xf0
[  309.117109][ T6219]  do_fast_syscall_32+0x2f/0x70
[  309.117142][ T6219]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  309.117178][ T6219] RIP: 0023:0xf7f6f549
[  309.117200][ T6219] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  309.185330][ T6219] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  309.194872][ T6219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  309.203921][ T6219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.212990][ T6219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.220455][ T6219] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  309.227737][ T6219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  309.234927][ T6219]  </TASK>
[  309.237692][ T6226] CPU: 1 PID: 6226 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  309.247937][ T6226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
23:00:18 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 19)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:18 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x402c5839, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:18 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0045878, 0x0)

[  309.256794][ T6226] Call Trace:
[  309.260500][ T6226]  <TASK>
[  309.261446][ T6231] FAULT_INJECTION: forcing a failure.
[  309.261446][ T6231] name failslab, interval 1, probability 0, space 0, times 0
[  309.263396][ T6226]  dump_stack_lvl+0xcd/0x134
[  309.280756][ T6226]  should_fail.cold+0x5/0xa
[  309.285245][ T6226]  prepare_alloc_pages+0x17b/0x570
[  309.290272][ T6226]  __alloc_pages+0x12f/0x500
[  309.294960][ T6226]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  309.301809][ T6226]  alloc_pages+0x1aa/0x310
[  309.306271][ T6226]  __vmalloc_node_range+0x8a7/0x13c0
[  309.311659][ T6226]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  309.316835][ T6226]  ? vfree_atomic+0xe0/0xe0
[  309.321583][ T6226]  ? vfs_fileattr_set+0xbe0/0xbe0
[  309.326705][ T6226]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  309.331578][ T6226]  __vmalloc+0x69/0x80
[  309.335644][ T6226]  ? kvm_dev_ioctl+0x1a4/0x1c70
[  309.340481][ T6226]  ? kvm_stat_data_open+0x380/0x380
[  309.345638][ T6226]  kvm_dev_ioctl+0x1a4/0x1c70
[  309.350318][ T6226]  ? __context_tracking_exit+0xb8/0xe0
[  309.355804][ T6226]  ? kvm_stat_data_open+0x380/0x380
[  309.360992][ T6226]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  309.367160][ T6226]  ? kvm_stat_data_open+0x380/0x380
[  309.372385][ T6226]  __do_compat_sys_ioctl+0x1c7/0x290
[  309.377606][ T6226]  __do_fast_syscall_32+0x65/0xf0
[  309.382569][ T6226]  do_fast_syscall_32+0x2f/0x70
[  309.387370][ T6226]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  309.393562][ T6226] RIP: 0023:0xf7fa4549
[  309.397648][ T6226] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  309.417082][ T6226] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  309.425564][ T6226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  309.433521][ T6226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.441435][ T6226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.449257][ T6226] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  309.457093][ T6226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x80046601, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  309.464918][ T6226]  </TASK>
[  309.468129][ T6231] CPU: 0 PID: 6231 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:19 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 18)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  309.479854][ T6231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x80086301, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  309.489830][ T6231] Call Trace:
[  309.493527][ T6231]  <TASK>
[  309.497083][ T6231]  dump_stack_lvl+0xcd/0x134
[  309.502133][ T6231]  should_fail.cold+0x5/0xa
[  309.506773][ T6231]  should_failslab+0x5/0x10
[  309.511285][ T6231]  kmem_cache_alloc_trace+0x60/0x3f0
[  309.516627][ T6231]  ? kvm_dev_ioctl+0xb49/0x1c70
23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x80086601, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  309.521634][ T6231]  kvm_dev_ioctl+0xb49/0x1c70
[  309.524925][ T6243] FAULT_INJECTION: forcing a failure.
[  309.524925][ T6243] name failslab, interval 1, probability 0, space 0, times 0
[  309.526714][ T6231]  ? kvm_stat_data_open+0x380/0x380
[  309.526745][ T6231]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  309.526762][ T6231]  ? kvm_stat_data_open+0x380/0x380
[  309.556015][ T6231]  __do_compat_sys_ioctl+0x1c7/0x290
23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x801c581f, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  309.562446][ T6231]  __do_fast_syscall_32+0x65/0xf0
[  309.568378][ T6231]  do_fast_syscall_32+0x2f/0x70
[  309.575368][ T6231]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  309.584759][ T6231] RIP: 0023:0xf7f6f549
[  309.590214][ T6231] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  309.610638][ T6231] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  309.619014][ T6231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  309.627093][ T6231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.635126][ T6231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.643456][ T6231] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  309.651552][ T6231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  309.659391][ T6231]  </TASK>
[  309.662590][ T6243] CPU: 1 PID: 6243 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  309.672970][ T6243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  309.681802][ T6243] Call Trace:
[  309.685087][ T6243]  <TASK>
[  309.687986][ T6243]  dump_stack_lvl+0xcd/0x134
[  309.692516][ T6243]  should_fail.cold+0x5/0xa
[  309.696937][ T6243]  should_failslab+0x5/0x10
[  309.701349][ T6243]  kmem_cache_alloc_trace+0x60/0x3f0
[  309.706534][ T6243]  ? kvm_dev_ioctl+0xb49/0x1c70
[  309.711333][ T6243]  kvm_dev_ioctl+0xb49/0x1c70
[  309.715964][ T6243]  ? kvm_stat_data_open+0x380/0x380
[  309.721087][ T6243]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  309.727096][ T6243]  ? kvm_stat_data_open+0x380/0x380
[  309.732901][ T6243]  __do_compat_sys_ioctl+0x1c7/0x290
[  309.738126][ T6243]  __do_fast_syscall_32+0x65/0xf0
[  309.743023][ T6243]  do_fast_syscall_32+0x2f/0x70
[  309.747609][ T6243]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  309.754098][ T6243] RIP: 0023:0xf7fa4549
[  309.758152][ T6243] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  309.777508][ T6243] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  309.785773][ T6243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  309.793706][ T6243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.801633][ T6243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.809196][ T6243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  309.818370][ T6243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  309.827840][ T6243]  </TASK>
23:00:19 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 20)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:19 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0145401, 0x0)

23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xc0045878, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:19 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 19)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xc0045878, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  309.855619][ T6255] FAULT_INJECTION: forcing a failure.
23:00:19 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0189436, 0x0)

[  309.855619][ T6255] name failslab, interval 1, probability 0, space 0, times 0
[  309.874011][ T6259] FAULT_INJECTION: forcing a failure.
[  309.874011][ T6259] name failslab, interval 1, probability 0, space 0, times 0
23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xc0189436, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:19 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc020660b, 0x0)

[  309.883983][ T6255] CPU: 1 PID: 6255 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  309.902905][ T6255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  309.911734][ T6255] Call Trace:
[  309.915126][ T6255]  <TASK>
[  309.918063][ T6255]  dump_stack_lvl+0xcd/0x134
[  309.922543][ T6255]  should_fail.cold+0x5/0xa
[  309.926913][ T6255]  should_failslab+0x5/0x10
[  309.931323][ T6255]  kmem_cache_alloc_trace+0x60/0x3f0
[  309.936469][ T6255]  ? kvm_dev_ioctl+0xb49/0x1c70
[  309.941207][ T6255]  kvm_dev_ioctl+0xb49/0x1c70
[  309.945929][ T6255]  ? kvm_stat_data_open+0x380/0x380
[  309.950642][ T6255]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  309.956818][ T6255]  ? kvm_stat_data_open+0x380/0x380
[  309.961897][ T6255]  __do_compat_sys_ioctl+0x1c7/0x290
[  309.967021][ T6255]  __do_fast_syscall_32+0x65/0xf0
[  309.972123][ T6255]  do_fast_syscall_32+0x2f/0x70
[  309.976901][ T6255]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  309.983215][ T6255] RIP: 0023:0xf7f6f549
[  309.987165][ T6255] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  310.006800][ T6255] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  310.015338][ T6255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  310.023074][ T6255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  310.030972][ T6255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.039022][ T6255] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  310.046835][ T6255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.054673][ T6255]  </TASK>
[  310.057611][ T6259] CPU: 0 PID: 6259 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:19 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 21)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xc020660b, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:19 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, 0x0)

[  310.068018][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  310.078185][ T6259] Call Trace:
[  310.082296][ T6259]  <TASK>
[  310.086101][ T6259]  dump_stack_lvl+0xcd/0x134
[  310.091500][ T6259]  should_fail.cold+0x5/0xa
[  310.096520][ T6259]  should_failslab+0x5/0x10
[  310.101497][ T6259]  kmem_cache_alloc_trace+0x60/0x3f0
[  310.101498][ T6271] FAULT_INJECTION: forcing a failure.
[  310.101498][ T6271] name failslab, interval 1, probability 0, space 0, times 0
[  310.121547][ T6259]  ? kvm_dev_ioctl+0xb49/0x1c70
[  310.126953][ T6259]  kvm_dev_ioctl+0xb49/0x1c70
[  310.132442][ T6259]  ? kvm_stat_data_open+0x380/0x380
[  310.138255][ T6259]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  310.145204][ T6259]  ? kvm_stat_data_open+0x380/0x380
[  310.151352][ T6259]  __do_compat_sys_ioctl+0x1c7/0x290
[  310.157153][ T6259]  __do_fast_syscall_32+0x65/0xf0
[  310.162738][ T6259]  do_fast_syscall_32+0x2f/0x70
[  310.168166][ T6259]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  310.175918][ T6259] RIP: 0023:0xf7fa4549
[  310.180008][ T6259] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  310.199509][ T6259] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  310.208005][ T6259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  310.216325][ T6259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  310.224230][ T6259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.232218][ T6259] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  310.240188][ T6259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.248261][ T6259]  </TASK>
[  310.251264][ T6271] CPU: 1 PID: 6271 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  310.261875][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  310.270732][ T6271] Call Trace:
[  310.273992][ T6271]  <TASK>
23:00:19 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 20)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:19 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:19 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0f85403, 0x0)

[  310.276890][ T6271]  dump_stack_lvl+0xcd/0x134
[  310.282569][ T6271]  should_fail.cold+0x5/0xa
[  310.288118][ T6271]  should_failslab+0x5/0x10
23:00:19 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x208241)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  310.294120][ T6271]  kmem_cache_alloc_trace+0x60/0x3f0
[  310.299838][ T6271]  ? kvm_dev_ioctl+0xb49/0x1c70
[  310.304609][ T6271]  kvm_dev_ioctl+0xb49/0x1c70
[  310.309219][ T6271]  ? kvm_stat_data_open+0x380/0x380
23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x208241)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  310.314345][ T6271]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  310.321998][ T6271]  ? kvm_stat_data_open+0x380/0x380
[  310.324835][ T6283] FAULT_INJECTION: forcing a failure.
[  310.324835][ T6283] name failslab, interval 1, probability 0, space 0, times 0
[  310.328419][ T6271]  __do_compat_sys_ioctl+0x1c7/0x290
[  310.349049][ T6271]  __do_fast_syscall_32+0x65/0xf0
[  310.355930][ T6271]  do_fast_syscall_32+0x2f/0x70
[  310.362407][ T6271]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  310.370902][ T6271] RIP: 0023:0xf7f6f549
[  310.376134][ T6271] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  310.402495][ T6271] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  310.410848][ T6271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  310.418793][ T6271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  310.426664][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.434515][ T6271] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  310.442476][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.450269][ T6271]  </TASK>
[  310.454299][ T6283] CPU: 0 PID: 6283 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  310.464630][ T6283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  310.473470][ T6283] Call Trace:
[  310.476697][ T6283]  <TASK>
[  310.479583][ T6283]  dump_stack_lvl+0xcd/0x134
[  310.484140][ T6283]  should_fail.cold+0x5/0xa
[  310.488573][ T6283]  should_failslab+0x5/0x10
[  310.493031][ T6283]  kmem_cache_alloc_trace+0x60/0x3f0
[  310.498308][ T6283]  ? kvm_dev_ioctl+0xb49/0x1c70
[  310.503102][ T6283]  kvm_dev_ioctl+0xb49/0x1c70
[  310.507754][ T6283]  ? kvm_stat_data_open+0x380/0x380
[  310.512965][ T6283]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  310.519503][ T6283]  ? kvm_stat_data_open+0x380/0x380
[  310.525647][ T6283]  __do_compat_sys_ioctl+0x1c7/0x290
[  310.532172][ T6283]  __do_fast_syscall_32+0x65/0xf0
[  310.537990][ T6283]  do_fast_syscall_32+0x2f/0x70
[  310.543291][ T6283]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  310.550434][ T6283] RIP: 0023:0xf7fa4549
[  310.554989][ T6283] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  310.577105][ T6283] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  310.586471][ T6283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  310.596222][ T6283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  310.605320][ T6283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.614458][ T6283] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  310.623964][ T6283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.632765][ T6283]  </TASK>
23:00:20 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 22)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x208241)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:20 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 21)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  310.682672][ T6293] FAULT_INJECTION: forcing a failure.
[  310.682672][ T6293] name failslab, interval 1, probability 0, space 0, times 0
[  310.689356][ T6297] FAULT_INJECTION: forcing a failure.
[  310.689356][ T6297] name failslab, interval 1, probability 0, space 0, times 0
[  310.701911][ T6293] CPU: 1 PID: 6293 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  310.720538][ T6293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  310.729374][ T6293] Call Trace:
[  310.732715][ T6293]  <TASK>
[  310.735601][ T6293]  dump_stack_lvl+0xcd/0x134
[  310.740282][ T6293]  should_fail.cold+0x5/0xa
[  310.744751][ T6293]  should_failslab+0x5/0x10
[  310.749228][ T6293]  kmem_cache_alloc_trace+0x60/0x3f0
[  310.754392][ T6293]  ? kvm_dev_ioctl+0xb49/0x1c70
[  310.759131][ T6293]  kvm_dev_ioctl+0xb49/0x1c70
[  310.763746][ T6293]  ? kvm_stat_data_open+0x380/0x380
[  310.768799][ T6293]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  310.774972][ T6293]  ? kvm_stat_data_open+0x380/0x380
[  310.780121][ T6293]  __do_compat_sys_ioctl+0x1c7/0x290
[  310.785368][ T6293]  __do_fast_syscall_32+0x65/0xf0
[  310.790381][ T6293]  do_fast_syscall_32+0x2f/0x70
[  310.795112][ T6293]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  310.801484][ T6293] RIP: 0023:0xf7fa4549
[  310.805616][ T6293] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  310.825725][ T6293] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  310.834698][ T6293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  310.843330][ T6293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  310.852255][ T6293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.860841][ T6293] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  310.869533][ T6293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.877983][ T6293]  </TASK>
[  310.881058][ T6297] CPU: 2 PID: 6297 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  310.891965][ T6297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  310.900831][ T6297] Call Trace:
[  310.904052][ T6297]  <TASK>
[  310.907008][ T6297]  dump_stack_lvl+0xcd/0x134
[  310.911600][ T6297]  should_fail.cold+0x5/0xa
[  310.916297][ T6297]  should_failslab+0x5/0x10
[  310.921013][ T6297]  kmem_cache_alloc_trace+0x60/0x3f0
[  310.926275][ T6297]  ? kvm_dev_ioctl+0xb49/0x1c70
[  310.931097][ T6297]  kvm_dev_ioctl+0xb49/0x1c70
[  310.935829][ T6297]  ? kvm_stat_data_open+0x380/0x380
[  310.941112][ T6297]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  310.948586][ T6297]  ? kvm_stat_data_open+0x380/0x380
[  310.955069][ T6297]  __do_compat_sys_ioctl+0x1c7/0x290
[  310.962367][ T6297]  __do_fast_syscall_32+0x65/0xf0
[  310.969247][ T6297]  do_fast_syscall_32+0x2f/0x70
[  310.975318][ T6297]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  310.983272][ T6297] RIP: 0023:0xf7f6f549
[  310.988360][ T6297] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  311.014129][ T6297] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  311.024994][ T6297] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  311.033742][ T6297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  311.042559][ T6297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  311.050370][ T6297] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  311.059099][ T6297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  311.066980][ T6297]  </TASK>
23:00:20 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:20 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 22)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:20 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 23)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  311.091919][ T6303] FAULT_INJECTION: forcing a failure.
[  311.091919][ T6303] name failslab, interval 1, probability 0, space 0, times 0
[  311.105418][ T6303] CPU: 2 PID: 6303 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x30100)
ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302)

[  311.115623][ T6303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  311.124051][ T6309] FAULT_INJECTION: forcing a failure.
[  311.124051][ T6309] name failslab, interval 1, probability 0, space 0, times 0
[  311.125787][ T6303] Call Trace:
[  311.125798][ T6303]  <TASK>
23:00:20 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  311.125807][ T6303]  dump_stack_lvl+0xcd/0x134
[  311.125835][ T6303]  should_fail.cold+0x5/0xa
[  311.125856][ T6303]  should_failslab+0x5/0x10
[  311.125873][ T6303]  kmem_cache_alloc_trace+0x60/0x3f0
23:00:20 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  311.125889][ T6303]  ? kvm_dev_ioctl+0xb49/0x1c70
[  311.125912][ T6303]  kvm_dev_ioctl+0xb49/0x1c70
[  311.125935][ T6303]  ? kvm_stat_data_open+0x380/0x380
[  311.125957][ T6303]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  311.190329][ T6303]  ? kvm_stat_data_open+0x380/0x380
[  311.196163][ T6303]  __do_compat_sys_ioctl+0x1c7/0x290
[  311.201455][ T6303]  __do_fast_syscall_32+0x65/0xf0
[  311.206425][ T6303]  do_fast_syscall_32+0x2f/0x70
[  311.211548][ T6303]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  311.218618][ T6303] RIP: 0023:0xf7fa4549
[  311.222580][ T6303] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  311.246441][ T6303] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  311.256910][ T6303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  311.266863][ T6303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  311.276402][ T6303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  311.286433][ T6303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  311.295612][ T6303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
23:00:20 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x30100) (async)
ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302)

23:00:20 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  311.304282][ T6303]  </TASK>
[  311.308095][ T6309] CPU: 1 PID: 6309 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  311.319471][ T6309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  311.329873][ T6309] Call Trace:
[  311.333509][ T6309]  <TASK>
23:00:21 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 23)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  311.336538][ T6309]  dump_stack_lvl+0xcd/0x134
[  311.341658][ T6309]  should_fail.cold+0x5/0xa
[  311.346852][ T6309]  should_failslab+0x5/0x10
[  311.351898][ T6325] FAULT_INJECTION: forcing a failure.
[  311.351898][ T6325] name failslab, interval 1, probability 0, space 0, times 0
[  311.352375][ T6309]  kmem_cache_alloc_trace+0x60/0x3f0
[  311.372402][ T6309]  ? alloc_workqueue_attrs+0x38/0x80
[  311.378559][ T6309]  alloc_workqueue_attrs+0x38/0x80
[  311.384939][ T6309]  alloc_workqueue+0x958/0xf00
[  311.390853][ T6309]  ? lockdep_init_map_type+0x21a/0x7f0
[  311.397111][ T6309]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  311.403681][ T6309]  ? init_srcu_struct_fields+0xcb2/0x1360
[  311.410250][ T6309]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  311.416852][ T6309]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  311.423426][ T6309]  kvm_mmu_init_vm+0x128/0x210
[  311.429561][ T6309]  kvm_arch_init_vm+0x64/0x680
[  311.436118][ T6309]  kvm_dev_ioctl+0xc00/0x1c70
[  311.443231][ T6309]  ? kvm_stat_data_open+0x380/0x380
[  311.449223][ T6309]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  311.455613][ T6309]  ? kvm_stat_data_open+0x380/0x380
[  311.461106][ T6309]  __do_compat_sys_ioctl+0x1c7/0x290
[  311.466336][ T6309]  __do_fast_syscall_32+0x65/0xf0
[  311.471281][ T6309]  do_fast_syscall_32+0x2f/0x70
[  311.476076][ T6309]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  311.482304][ T6309] RIP: 0023:0xf7f6f549
[  311.486289][ T6309] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  311.505976][ T6309] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  311.514253][ T6309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  311.522354][ T6309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  311.530276][ T6309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  311.538086][ T6309] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  311.547574][ T6309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  311.557919][ T6309]  </TASK>
[  311.561976][ T6325] CPU: 2 PID: 6325 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  311.573473][ T6325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  311.582413][ T6325] Call Trace:
[  311.585806][ T6325]  <TASK>
[  311.588745][ T6325]  dump_stack_lvl+0xcd/0x134
23:00:21 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 24)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:21 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:21 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x30100)
ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302)

[  311.593441][ T6325]  should_fail.cold+0x5/0xa
[  311.598700][ T6325]  should_failslab+0x5/0x10
[  311.604170][ T6325]  kmem_cache_alloc_trace+0x60/0x3f0
[  311.610797][ T6325]  ? kvm_dev_ioctl+0xb49/0x1c70
[  311.616097][ T6325]  kvm_dev_ioctl+0xb49/0x1c70
[  311.616664][ T6332] FAULT_INJECTION: forcing a failure.
[  311.616664][ T6332] name failslab, interval 1, probability 0, space 0, times 0
[  311.620749][ T6325]  ? kvm_stat_data_open+0x380/0x380
[  311.638386][ T6325]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  311.644869][ T6325]  ? kvm_stat_data_open+0x380/0x380
[  311.650072][ T6325]  __do_compat_sys_ioctl+0x1c7/0x290
[  311.655328][ T6325]  __do_fast_syscall_32+0x65/0xf0
[  311.660202][ T6325]  do_fast_syscall_32+0x2f/0x70
[  311.664935][ T6325]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  311.671140][ T6325] RIP: 0023:0xf7fa4549
[  311.675343][ T6325] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  311.694461][ T6325] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  311.703113][ T6325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  311.710978][ T6325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  311.718749][ T6325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  311.726421][ T6325] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  311.735192][ T6325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  311.745045][ T6325]  </TASK>
23:00:21 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8d}, 0x80, 0x80000001})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:21 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8d}, 0x80, 0x80000001})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8d}, 0x80, 0x80000001}) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)

[  311.749142][ T6332] CPU: 1 PID: 6332 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  311.759979][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
23:00:21 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x7)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  311.768676][ T6332] Call Trace:
[  311.772208][ T6332]  <TASK>
[  311.775161][ T6332]  dump_stack_lvl+0xcd/0x134
[  311.780766][ T6332]  should_fail.cold+0x5/0xa
[  311.786357][ T6332]  should_failslab+0x5/0x10
[  311.792253][ T6332]  kmem_cache_alloc_trace+0x60/0x3f0
[  311.798869][ T6332]  ? alloc_workqueue_attrs+0x38/0x80
[  311.805465][ T6332]  alloc_workqueue_attrs+0x38/0x80
[  311.812151][ T6332]  alloc_workqueue+0x958/0xf00
[  311.812938][ T6344] FAULT_INJECTION: forcing a failure.
[  311.812938][ T6344] name failslab, interval 1, probability 0, space 0, times 0
[  311.817979][ T6332]  ? lockdep_init_map_type+0x21a/0x7f0
23:00:21 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 24)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:21 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  311.818023][ T6332]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  311.818060][ T6332]  ? init_srcu_struct_fields+0xcb2/0x1360
[  311.852025][ T6332]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  311.858758][ T6332]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  311.865167][ T6332]  kvm_mmu_init_vm+0x128/0x210
[  311.871456][ T6332]  kvm_arch_init_vm+0x64/0x680
[  311.877510][ T6332]  kvm_dev_ioctl+0xc00/0x1c70
[  311.883448][ T6332]  ? kvm_stat_data_open+0x380/0x380
[  311.890225][ T6332]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  311.897794][ T6332]  ? kvm_stat_data_open+0x380/0x380
[  311.904104][ T6332]  __do_compat_sys_ioctl+0x1c7/0x290
[  311.910875][ T6332]  __do_fast_syscall_32+0x65/0xf0
[  311.917081][ T6332]  do_fast_syscall_32+0x2f/0x70
[  311.923072][ T6332]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  311.931242][ T6332] RIP: 0023:0xf7f6f549
[  311.936240][ T6332] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  311.960754][ T6332] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  311.971665][ T6332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  311.981936][ T6332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  311.992860][ T6332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.003360][ T6332] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  312.013544][ T6332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.021519][ T6332]  </TASK>
[  312.024283][ T6344] CPU: 2 PID: 6344 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  312.034579][ T6344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  312.043338][ T6344] Call Trace:
[  312.046572][ T6344]  <TASK>
[  312.049434][ T6344]  dump_stack_lvl+0xcd/0x134
[  312.053911][ T6344]  should_fail.cold+0x5/0xa
[  312.058248][ T6344]  should_failslab+0x5/0x10
23:00:21 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 25)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:21 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:21 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8d}, 0x80, 0x80000001}) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  312.062639][ T6344]  kmem_cache_alloc_trace+0x60/0x3f0
[  312.068241][ T6344]  ? alloc_workqueue_attrs+0x38/0x80
[  312.073413][ T6344]  alloc_workqueue_attrs+0x38/0x80
[  312.078554][ T6344]  alloc_workqueue+0x958/0xf00
[  312.083210][ T6344]  ? lockdep_init_map_type+0x21a/0x7f0
[  312.088514][ T6344]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  312.094118][ T6344]  ? init_srcu_struct_fields+0xcb2/0x1360
[  312.099693][ T6344]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  312.104825][ T6344]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  312.109811][ T6344]  kvm_mmu_init_vm+0x128/0x210
[  312.114478][ T6344]  kvm_arch_init_vm+0x64/0x680
[  312.119203][ T6344]  kvm_dev_ioctl+0xc00/0x1c70
[  312.124189][ T6344]  ? kvm_stat_data_open+0x380/0x380
[  312.129326][ T6344]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  312.135457][ T6344]  ? kvm_stat_data_open+0x380/0x380
[  312.140538][ T6344]  __do_compat_sys_ioctl+0x1c7/0x290
[  312.145798][ T6344]  __do_fast_syscall_32+0x65/0xf0
[  312.150812][ T6344]  do_fast_syscall_32+0x2f/0x70
[  312.155731][ T6344]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  312.161949][ T6344] RIP: 0023:0xf7fa4549
[  312.166082][ T6344] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  312.185945][ T6344] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  312.195592][ T6344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  312.204820][ T6344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  312.212683][ T6344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.220467][ T6344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  312.228262][ T6344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.236419][ T6344]  </TASK>
[  312.264030][ T6354] FAULT_INJECTION: forcing a failure.
23:00:21 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x9}], &(0x7f0000000040)='GPL\x00', 0x6, 0x32, &(0x7f00000000c0)=""/50, 0x40f00, 0xa, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x0, 0x5, 0x200}, 0x10}, 0x80)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r1, 0xd}, 0x10)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x49ca80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
ioctl$CDROMPAUSE(r2, 0x5301)

[  312.264030][ T6354] name failslab, interval 1, probability 0, space 0, times 0
23:00:21 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 25)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:21 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  312.277715][ T6354] CPU: 2 PID: 6354 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  312.289696][ T6354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  312.298537][ T6354] Call Trace:
[  312.301988][ T6354]  <TASK>
[  312.305082][ T6354]  dump_stack_lvl+0xcd/0x134
[  312.309597][ T6354]  should_fail.cold+0x5/0xa
[  312.314017][ T6354]  should_failslab+0x5/0x10
[  312.318396][ T6354]  __kmalloc_track_caller+0x79/0x320
[  312.323551][ T6354]  ? kasprintf+0xbb/0xf0
[  312.327885][ T6354]  kvasprintf+0xb5/0x150
[  312.332023][ T6354]  ? bust_spinlocks+0xe0/0xe0
[  312.336598][ T6354]  ? preempt_count_add+0x74/0x140
[  312.341588][ T6354]  ? __is_module_percpu_address+0x253/0x370
[  312.347312][ T6354]  ? cpumask_next+0xa4/0xf0
[  312.351723][ T6354]  kasprintf+0xbb/0xf0
[  312.355861][ T6354]  ? kvasprintf_const+0x190/0x190
[  312.360733][ T6354]  ? free_zapped_rcu+0x290/0x290
[  312.365556][ T6354]  ? lockdep_init_map_type+0x21a/0x7f0
[  312.371200][ T6354]  alloc_workqueue+0x3f0/0xf00
[  312.376835][ T6354]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  312.383433][ T6354]  ? init_srcu_struct_fields+0xcb2/0x1360
[  312.389394][ T6354]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  312.394803][ T6354]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  312.399802][ T6354]  kvm_mmu_init_vm+0x128/0x210
[  312.404601][ T6354]  kvm_arch_init_vm+0x64/0x680
[  312.409756][ T6354]  kvm_dev_ioctl+0xc00/0x1c70
[  312.414338][ T6354]  ? kvm_stat_data_open+0x380/0x380
[  312.419584][ T6354]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  312.425668][ T6354]  ? kvm_stat_data_open+0x380/0x380
[  312.430746][ T6354]  __do_compat_sys_ioctl+0x1c7/0x290
[  312.435890][ T6354]  __do_fast_syscall_32+0x65/0xf0
[  312.440935][ T6354]  do_fast_syscall_32+0x2f/0x70
[  312.445635][ T6354]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  312.451760][ T6354] RIP: 0023:0xf7f6f549
[  312.455678][ T6354] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  312.475054][ T6354] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  312.483210][ T6354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  312.491438][ T6354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  312.499417][ T6354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.507197][ T6354] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  312.515087][ T6354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.522891][ T6354]  </TASK>
23:00:22 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x9}], &(0x7f0000000040)='GPL\x00', 0x6, 0x32, &(0x7f00000000c0)=""/50, 0x40f00, 0xa, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x0, 0x5, 0x200}, 0x10}, 0x80) (async)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r1, 0xd}, 0x10) (async)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x49ca80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0) (async)
ioctl$CDROMPAUSE(r2, 0x5301)

23:00:22 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x9}], &(0x7f0000000040)='GPL\x00', 0x6, 0x32, &(0x7f00000000c0)=""/50, 0x40f00, 0xa, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x0, 0x5, 0x200}, 0x10}, 0x80)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r1, 0xd}, 0x10) (async, rerun: 32)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x49ca80, 0x0) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0) (async)
ioctl$CDROMPAUSE(r2, 0x5301)

[  312.595562][ T6368] FAULT_INJECTION: forcing a failure.
[  312.595562][ T6368] name failslab, interval 1, probability 0, space 0, times 0
[  312.615774][ T6368] CPU: 2 PID: 6368 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  312.629274][ T6368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  312.640239][ T6368] Call Trace:
[  312.644278][ T6368]  <TASK>
[  312.648043][ T6368]  dump_stack_lvl+0xcd/0x134
[  312.653757][ T6368]  should_fail.cold+0x5/0xa
[  312.659583][ T6368]  should_failslab+0x5/0x10
[  312.665118][ T6368]  __kmalloc+0x7e/0x350
[  312.669343][ T6368]  ? apply_wqattrs_prepare+0xac/0x890
[  312.674675][ T6368]  apply_wqattrs_prepare+0xac/0x890
[  312.679787][ T6368]  apply_workqueue_attrs_locked+0xc1/0x140
[  312.685477][ T6368]  alloc_workqueue+0xb33/0xf00
[  312.690138][ T6368]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  312.695841][ T6368]  ? init_srcu_struct_fields+0xcb2/0x1360
[  312.701507][ T6368]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  312.706693][ T6368]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  312.711884][ T6368]  kvm_mmu_init_vm+0x128/0x210
[  312.716569][ T6368]  kvm_arch_init_vm+0x64/0x680
[  312.721194][ T6368]  kvm_dev_ioctl+0xc00/0x1c70
[  312.725782][ T6368]  ? kvm_stat_data_open+0x380/0x380
[  312.730877][ T6368]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  312.737020][ T6368]  ? kvm_stat_data_open+0x380/0x380
[  312.742084][ T6368]  __do_compat_sys_ioctl+0x1c7/0x290
[  312.747291][ T6368]  __do_fast_syscall_32+0x65/0xf0
[  312.752215][ T6368]  do_fast_syscall_32+0x2f/0x70
[  312.756960][ T6368]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  312.763255][ T6368] RIP: 0023:0xf7fa4549
[  312.767226][ T6368] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  312.786464][ T6368] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  312.794756][ T6368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  312.802545][ T6368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  312.810210][ T6368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.818493][ T6368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  312.826461][ T6368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.834425][ T6368]  </TASK>
23:00:22 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 26)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:22 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x49)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:22 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/95, 0x5f, 0x0, &(0x7f0000000080)=""/100, 0x64}}, 0x10)
openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0xd0000)
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x22400)
openat$proc_capi20(0xffffff9c, &(0x7f0000000200), 0x900, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x5, 0x240100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000002c0)={0x1, 0x3, 0xffffff73, 0x2, 0x6})
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = io_uring_setup(0x66f0, &(0x7f00000005c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r3, 0x10000000)
r4 = syz_io_uring_setup(0x4937, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000040))
r5 = io_uring_setup(0x66f0, &(0x7f00000005c0))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r6)
io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r7 = openat$ndctl0(0xffffff9c, &(0x7f0000000240), 0x400000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x403c5404, 0x0)

23:00:22 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 26)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

[  312.862362][ T6376] FAULT_INJECTION: forcing a failure.
[  312.862362][ T6376] name failslab, interval 1, probability 0, space 0, times 0
[  312.879525][ T6376] CPU: 2 PID: 6376 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:22 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8e)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  312.889812][ T6376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  312.899563][ T6376] Call Trace:
[  312.903587][ T6376]  <TASK>
23:00:22 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x90)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  312.906487][ T6376]  dump_stack_lvl+0xcd/0x134
[  312.911354][ T6376]  should_fail.cold+0x5/0xa
[  312.916185][ T6376]  should_failslab+0x5/0x10
[  312.920571][ T6376]  kmem_cache_alloc_trace+0x60/0x3f0
[  312.925762][ T6376]  ? alloc_workqueue_attrs+0x38/0x80
23:00:22 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  312.931000][ T6376]  alloc_workqueue_attrs+0x38/0x80
[  312.936468][ T6376]  apply_wqattrs_prepare+0xb4/0x890
[  312.941847][ T6376]  apply_workqueue_attrs_locked+0xc1/0x140
[  312.948807][ T6376]  alloc_workqueue+0xb33/0xf00
23:00:22 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x110)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  312.953865][ T6376]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  312.960402][ T6376]  ? init_srcu_struct_fields+0xcb2/0x1360
[  312.966914][ T6376]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  312.972623][ T6376]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  312.978350][ T6376]  kvm_mmu_init_vm+0x128/0x210
[  312.984271][ T6376]  kvm_arch_init_vm+0x64/0x680
[  312.990632][ T6376]  kvm_dev_ioctl+0xc00/0x1c70
[  312.997178][ T6376]  ? kvm_stat_data_open+0x380/0x380
[  313.003700][ T6376]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  313.011516][ T6376]  ? kvm_stat_data_open+0x380/0x380
[  313.017852][ T6376]  __do_compat_sys_ioctl+0x1c7/0x290
[  313.023850][ T6376]  __do_fast_syscall_32+0x65/0xf0
[  313.029578][ T6376]  do_fast_syscall_32+0x2f/0x70
[  313.035280][ T6376]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  313.042149][ T6376] RIP: 0023:0xf7fa4549
[  313.047391][ T6376] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  313.068829][ T6376] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  313.077794][ T6376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  313.086398][ T6376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  313.094849][ T6376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.102646][ T6376] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  313.110447][ T6376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.118238][ T6376]  </TASK>
[  313.126635][ T6380] FAULT_INJECTION: forcing a failure.
[  313.126635][ T6380] name failslab, interval 1, probability 0, space 0, times 0
[  313.142185][ T6380] CPU: 2 PID: 6380 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  313.154613][ T6380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  313.164430][ T6380] Call Trace:
[  313.168622][ T6380]  <TASK>
[  313.171520][ T6380]  dump_stack_lvl+0xcd/0x134
[  313.176615][ T6380]  should_fail.cold+0x5/0xa
[  313.182392][ T6380]  should_failslab+0x5/0x10
[  313.187615][ T6380]  __kmalloc+0x7e/0x350
[  313.191862][ T6380]  ? apply_wqattrs_prepare+0xac/0x890
[  313.198165][ T6380]  apply_wqattrs_prepare+0xac/0x890
[  313.203882][ T6380]  apply_workqueue_attrs_locked+0xc1/0x140
[  313.209986][ T6380]  alloc_workqueue+0xb33/0xf00
[  313.215242][ T6380]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  313.221669][ T6380]  ? init_srcu_struct_fields+0xcb2/0x1360
[  313.227726][ T6380]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  313.234312][ T6380]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  313.240416][ T6380]  kvm_mmu_init_vm+0x128/0x210
[  313.246022][ T6380]  kvm_arch_init_vm+0x64/0x680
[  313.251729][ T6380]  kvm_dev_ioctl+0xc00/0x1c70
[  313.256386][ T6380]  ? kvm_stat_data_open+0x380/0x380
[  313.261972][ T6380]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  313.268615][ T6380]  ? kvm_stat_data_open+0x380/0x380
[  313.275345][ T6380]  __do_compat_sys_ioctl+0x1c7/0x290
[  313.281476][ T6380]  __do_fast_syscall_32+0x65/0xf0
[  313.287827][ T6380]  do_fast_syscall_32+0x2f/0x70
[  313.293767][ T6380]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  313.301481][ T6380] RIP: 0023:0xf7f6f549
[  313.305971][ T6380] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  313.330465][ T6380] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  313.340239][ T6380] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  313.348025][ T6380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  313.355876][ T6380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.364392][ T6380] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  313.373111][ T6380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.382052][ T6380]  </TASK>
23:00:23 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 27)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x190)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:23 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/95, 0x5f, 0x0, &(0x7f0000000080)=""/100, 0x64}}, 0x10) (async)
openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0xd0000)
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) (async)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x22400) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000200), 0x900, 0x0) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x5, 0x240100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000002c0)={0x1, 0x3, 0xffffff73, 0x2, 0x6}) (async)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = io_uring_setup(0x66f0, &(0x7f00000005c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r3, 0x10000000) (async)
r4 = syz_io_uring_setup(0x4937, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000040))
r5 = io_uring_setup(0x66f0, &(0x7f00000005c0)) (async)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r6) (async)
io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0) (async)
r7 = openat$ndctl0(0xffffff9c, &(0x7f0000000240), 0x400000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x403c5404, 0x0)

23:00:23 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 27)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:23 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/95, 0x5f, 0x0, &(0x7f0000000080)=""/100, 0x64}}, 0x10)
openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0xd0000) (async)
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) (async)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x22400)
openat$proc_capi20(0xffffff9c, &(0x7f0000000200), 0x900, 0x0) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x5, 0x240100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000002c0)={0x1, 0x3, 0xffffff73, 0x2, 0x6}) (async)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = io_uring_setup(0x66f0, &(0x7f00000005c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r3, 0x10000000) (async)
r4 = syz_io_uring_setup(0x4937, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000040))
r5 = io_uring_setup(0x66f0, &(0x7f00000005c0)) (async)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r6)
io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r7 = openat$ndctl0(0xffffff9c, &(0x7f0000000240), 0x400000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x403c5404, 0x0)

[  313.413932][ T6400] FAULT_INJECTION: forcing a failure.
[  313.413932][ T6400] name failslab, interval 1, probability 0, space 0, times 0
23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x210)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  313.428203][ T6400] CPU: 3 PID: 6400 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  313.438416][ T6400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x300)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  313.447150][ T6400] Call Trace:
[  313.451976][ T6400]  <TASK>
[  313.455598][ T6400]  dump_stack_lvl+0xcd/0x134
[  313.461320][ T6400]  should_fail.cold+0x5/0xa
[  313.466926][ T6400]  should_failslab+0x5/0x10
[  313.473256][ T6400]  kmem_cache_alloc_trace+0x60/0x3f0
[  313.479823][ T6400]  ? alloc_workqueue_attrs+0x38/0x80
[  313.486370][ T6400]  alloc_workqueue_attrs+0x38/0x80
[  313.493295][ T6400]  apply_wqattrs_prepare+0xbc/0x890
[  313.499682][ T6400]  apply_workqueue_attrs_locked+0xc1/0x140
[  313.506050][ T6400]  alloc_workqueue+0xb33/0xf00
[  313.511025][ T6400]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  313.517273][ T6400]  ? init_srcu_struct_fields+0xcb2/0x1360
[  313.522985][ T6400]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  313.528289][ T6400]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  313.533377][ T6400]  kvm_mmu_init_vm+0x128/0x210
[  313.538044][ T6400]  kvm_arch_init_vm+0x64/0x680
[  313.542711][ T6400]  kvm_dev_ioctl+0xc00/0x1c70
[  313.547296][ T6400]  ? kvm_stat_data_open+0x380/0x380
[  313.552345][ T6400]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  313.558361][ T6400]  ? kvm_stat_data_open+0x380/0x380
[  313.563423][ T6400]  __do_compat_sys_ioctl+0x1c7/0x290
[  313.568582][ T6400]  __do_fast_syscall_32+0x65/0xf0
[  313.573476][ T6400]  do_fast_syscall_32+0x2f/0x70
[  313.578183][ T6400]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  313.584351][ T6400] RIP: 0023:0xf7f6f549
[  313.588361][ T6400] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  313.607479][ T6400] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  313.615626][ T6400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  313.623436][ T6400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  313.631298][ T6400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.639027][ T6400] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  313.646933][ T6400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
23:00:23 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x381400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0xfffffff9, 0x0, 0x8})

[  313.654656][ T6400]  </TASK>
[  313.662916][ T6401] FAULT_INJECTION: forcing a failure.
[  313.662916][ T6401] name failslab, interval 1, probability 0, space 0, times 0
23:00:23 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 28)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:23 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x381400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0xfffffff9, 0x0, 0x8})

[  313.680825][ T6401] CPU: 2 PID: 6401 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x379)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  313.695950][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  313.707762][ T6401] Call Trace:
[  313.711957][ T6401]  <TASK>
[  313.715700][ T6401]  dump_stack_lvl+0xcd/0x134
[  313.721031][ T6401]  should_fail.cold+0x5/0xa
[  313.725642][ T6401]  should_failslab+0x5/0x10
[  313.730491][ T6401]  __kmalloc+0x7e/0x350
[  313.734794][ T6401]  ? apply_wqattrs_prepare+0xac/0x890
[  313.740368][ T6401]  apply_wqattrs_prepare+0xac/0x890
[  313.745789][ T6401]  apply_workqueue_attrs_locked+0xc1/0x140
[  313.752175][ T6401]  alloc_workqueue+0xb33/0xf00
[  313.757277][ T6401]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  313.763099][ T6401]  ? init_srcu_struct_fields+0xcb2/0x1360
[  313.770293][ T6401]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  313.776657][ T6401]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  313.783095][ T6401]  kvm_mmu_init_vm+0x128/0x210
[  313.789462][ T6401]  kvm_arch_init_vm+0x64/0x680
[  313.796849][ T6401]  kvm_dev_ioctl+0xc00/0x1c70
[  313.802930][ T6401]  ? kvm_stat_data_open+0x380/0x380
[  313.809623][ T6401]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  313.816649][ T6401]  ? kvm_stat_data_open+0x380/0x380
[  313.821978][ T6401]  __do_compat_sys_ioctl+0x1c7/0x290
[  313.827470][ T6401]  __do_fast_syscall_32+0x65/0xf0
[  313.832730][ T6401]  do_fast_syscall_32+0x2f/0x70
[  313.839057][ T6401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  313.845610][ T6401] RIP: 0023:0xf7fa4549
[  313.850250][ T6401] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  313.873805][ T6401] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  313.885727][ T6401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  313.895693][ T6401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  313.905788][ T6401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.914150][ T6401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  313.922354][ T6401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.930675][ T6401]  </TASK>
[  313.936068][ T6420] FAULT_INJECTION: forcing a failure.
[  313.936068][ T6420] name failslab, interval 1, probability 0, space 0, times 0
23:00:23 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 28)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:23 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x381400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0xfffffff9, 0x0, 0x8})

23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3ad)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  313.962673][ T6420] CPU: 0 PID: 6420 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:23 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc8901)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  313.976364][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  313.988099][ T6420] Call Trace:
[  313.992169][ T6420]  <TASK>
23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x500)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  313.996157][ T6420]  dump_stack_lvl+0xcd/0x134
[  314.003213][ T6420]  should_fail.cold+0x5/0xa
[  314.008913][ T6420]  should_failslab+0x5/0x10
[  314.014548][ T6420]  kmem_cache_alloc_node+0x65/0x3f0
[  314.021090][ T6420]  ? alloc_unbound_pwq+0x4a5/0xce0
[  314.026797][ T6420]  alloc_unbound_pwq+0x4a5/0xce0
[  314.032329][ T6420]  apply_wqattrs_prepare+0x2b6/0x890
[  314.038146][ T6420]  apply_workqueue_attrs_locked+0xc1/0x140
[  314.045206][ T6420]  alloc_workqueue+0xb33/0xf00
[  314.049950][ T6420]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  314.055617][ T6420]  ? init_srcu_struct_fields+0xcb2/0x1360
[  314.061194][ T6420]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  314.066414][ T6420]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  314.071459][ T6420]  kvm_mmu_init_vm+0x128/0x210
[  314.076156][ T6420]  kvm_arch_init_vm+0x64/0x680
[  314.080834][ T6420]  kvm_dev_ioctl+0xc00/0x1c70
[  314.085526][ T6420]  ? kvm_stat_data_open+0x380/0x380
[  314.090638][ T6420]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  314.096804][ T6420]  ? kvm_stat_data_open+0x380/0x380
[  314.101885][ T6420]  __do_compat_sys_ioctl+0x1c7/0x290
[  314.107099][ T6420]  __do_fast_syscall_32+0x65/0xf0
[  314.112032][ T6420]  do_fast_syscall_32+0x2f/0x70
[  314.116777][ T6420]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  314.123047][ T6420] RIP: 0023:0xf7f6f549
[  314.127076][ T6420] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  314.146271][ T6420] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  314.154497][ T6420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  314.162398][ T6420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.170296][ T6420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.178089][ T6420] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  314.186068][ T6420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.194235][ T6420]  </TASK>
[  314.198187][ T6428] FAULT_INJECTION: forcing a failure.
[  314.198187][ T6428] name failslab, interval 1, probability 0, space 0, times 0
23:00:23 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 29)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:23 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x600)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:23 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc8901) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  314.212191][ T6428] CPU: 2 PID: 6428 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  314.223710][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  314.234750][ T6428] Call Trace:
[  314.238837][ T6428]  <TASK>
[  314.242420][ T6428]  dump_stack_lvl+0xcd/0x134
[  314.248585][ T6428]  should_fail.cold+0x5/0xa
[  314.254685][ T6428]  should_failslab+0x5/0x10
[  314.260313][ T6428]  kmem_cache_alloc_trace+0x60/0x3f0
[  314.267222][ T6428]  ? alloc_workqueue_attrs+0x38/0x80
[  314.273796][ T6428]  alloc_workqueue_attrs+0x38/0x80
[  314.280213][ T6428]  apply_wqattrs_prepare+0xbc/0x890
[  314.286916][ T6428]  apply_workqueue_attrs_locked+0xc1/0x140
[  314.294273][ T6428]  alloc_workqueue+0xb33/0xf00
[  314.300415][ T6428]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  314.307668][ T6428]  ? init_srcu_struct_fields+0xcb2/0x1360
[  314.315005][ T6428]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  314.321564][ T6428]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  314.327844][ T6428]  kvm_mmu_init_vm+0x128/0x210
[  314.332926][ T6428]  kvm_arch_init_vm+0x64/0x680
[  314.338605][ T6428]  kvm_dev_ioctl+0xc00/0x1c70
[  314.344614][ T6428]  ? kvm_stat_data_open+0x380/0x380
[  314.350575][ T6428]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  314.356883][ T6428]  ? kvm_stat_data_open+0x380/0x380
[  314.361951][ T6428]  __do_compat_sys_ioctl+0x1c7/0x290
[  314.367109][ T6428]  __do_fast_syscall_32+0x65/0xf0
[  314.372044][ T6428]  do_fast_syscall_32+0x2f/0x70
[  314.376926][ T6428]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  314.383162][ T6428] RIP: 0023:0xf7fa4549
[  314.387127][ T6428] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  314.406093][ T6428] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  314.414246][ T6428] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  314.421970][ T6428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.429769][ T6428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.437304][ T6428] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  314.445170][ T6428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.452970][ T6428]  </TASK>
[  314.457834][ T6442] FAULT_INJECTION: forcing a failure.
[  314.457834][ T6442] name failslab, interval 1, probability 0, space 0, times 0
23:00:24 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 29)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x700)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:24 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc8901) (async, rerun: 64)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  314.470288][ T6442] CPU: 2 PID: 6442 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  314.481270][ T6442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  314.490465][ T6442] Call Trace:
[  314.494145][ T6442]  <TASK>
[  314.497377][ T6442]  dump_stack_lvl+0xcd/0x134
[  314.502103][ T6442]  should_fail.cold+0x5/0xa
[  314.506839][ T6442]  should_failslab+0x5/0x10
[  314.511537][ T6442]  kmem_cache_alloc_node+0x65/0x3f0
[  314.516887][ T6442]  ? alloc_unbound_pwq+0x4a5/0xce0
[  314.522203][ T6442]  alloc_unbound_pwq+0x4a5/0xce0
23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb00)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  314.527338][ T6442]  apply_wqattrs_prepare+0x624/0x890
[  314.533062][ T6442]  apply_workqueue_attrs_locked+0xc1/0x140
[  314.539172][ T6442]  alloc_workqueue+0xb33/0xf00
[  314.544217][ T6442]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  314.550061][ T6442]  ? init_srcu_struct_fields+0xcb2/0x1360
[  314.556003][ T6442]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  314.561390][ T6442]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  314.566789][ T6442]  kvm_mmu_init_vm+0x128/0x210
[  314.571688][ T6442]  kvm_arch_init_vm+0x64/0x680
[  314.576583][ T6442]  kvm_dev_ioctl+0xc00/0x1c70
23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1001)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  314.581413][ T6442]  ? kvm_stat_data_open+0x380/0x380
[  314.587024][ T6442]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  314.593256][ T6442]  ? kvm_stat_data_open+0x380/0x380
[  314.598715][ T6442]  __do_compat_sys_ioctl+0x1c7/0x290
[  314.604189][ T6442]  __do_fast_syscall_32+0x65/0xf0
[  314.609376][ T6442]  do_fast_syscall_32+0x2f/0x70
[  314.614397][ T6442]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  314.620976][ T6442] RIP: 0023:0xf7f6f549
[  314.625085][ T6442] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  314.645705][ T6442] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  314.654310][ T6442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  314.662484][ T6442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.670732][ T6442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.678964][ T6442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  314.687136][ T6442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.695396][ T6442]  </TASK>
[  314.703108][ T6451] FAULT_INJECTION: forcing a failure.
[  314.703108][ T6451] name failslab, interval 1, probability 0, space 0, times 0
23:00:24 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 30)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1002)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:24 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x40480)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

[  314.717627][ T6451] CPU: 0 PID: 6451 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  314.728246][ T6451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  314.737075][ T6451] Call Trace:
[  314.740282][ T6451]  <TASK>
[  314.743631][ T6451]  dump_stack_lvl+0xcd/0x134
[  314.748176][ T6451]  should_fail.cold+0x5/0xa
[  314.752652][ T6451]  should_failslab+0x5/0x10
[  314.757115][ T6451]  kmem_cache_alloc_node+0x65/0x3f0
[  314.762310][ T6451]  ? alloc_unbound_pwq+0x4a5/0xce0
[  314.767569][ T6451]  alloc_unbound_pwq+0x4a5/0xce0
[  314.772475][ T6451]  apply_wqattrs_prepare+0x2b6/0x890
[  314.778151][ T6451]  apply_workqueue_attrs_locked+0xc1/0x140
[  314.784073][ T6451]  alloc_workqueue+0xb33/0xf00
[  314.788786][ T6451]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  314.794524][ T6451]  ? init_srcu_struct_fields+0xcb2/0x1360
[  314.800320][ T6451]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  314.805957][ T6451]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  314.811120][ T6451]  kvm_mmu_init_vm+0x128/0x210
[  314.815745][ T6451]  kvm_arch_init_vm+0x64/0x680
[  314.820375][ T6451]  kvm_dev_ioctl+0xc00/0x1c70
[  314.825090][ T6451]  ? kvm_stat_data_open+0x380/0x380
[  314.830879][ T6451]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  314.837353][ T6451]  ? kvm_stat_data_open+0x380/0x380
[  314.842580][ T6451]  __do_compat_sys_ioctl+0x1c7/0x290
[  314.847822][ T6451]  __do_fast_syscall_32+0x65/0xf0
[  314.852764][ T6451]  do_fast_syscall_32+0x2f/0x70
[  314.857551][ T6451]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  314.864654][ T6451] RIP: 0023:0xf7fa4549
[  314.869637][ T6451] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  314.890665][ T6451] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  314.898970][ T6451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  314.907111][ T6451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.915021][ T6451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.923121][ T6451] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  314.931650][ T6451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.939474][ T6451]  </TASK>
[  314.945554][ T6464] FAULT_INJECTION: forcing a failure.
[  314.945554][ T6464] name failslab, interval 1, probability 0, space 0, times 0
23:00:24 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 30)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:24 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x40480)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f00)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  314.962457][ T6464] CPU: 3 PID: 6464 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  314.975913][ T6464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  314.989023][ T6464] Call Trace:
[  314.992364][ T6464]  <TASK>
[  314.995273][ T6464]  dump_stack_lvl+0xcd/0x134
[  314.999846][ T6464]  should_fail.cold+0x5/0xa
[  315.004851][ T6464]  should_failslab+0x5/0x10
[  315.009499][ T6464]  kmem_cache_alloc_node+0x65/0x3f0
[  315.014923][ T6464]  ? alloc_unbound_pwq+0x4a5/0xce0
[  315.020025][ T6464]  alloc_unbound_pwq+0x4a5/0xce0
[  315.024932][ T6464]  apply_wqattrs_prepare+0x624/0x890
[  315.030241][ T6464]  apply_workqueue_attrs_locked+0xc1/0x140
[  315.036110][ T6464]  alloc_workqueue+0xb33/0xf00
[  315.040878][ T6464]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  315.046920][ T6464]  ? init_srcu_struct_fields+0xcb2/0x1360
[  315.053517][ T6464]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  315.059255][ T6464]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  315.064823][ T6464]  kvm_mmu_init_vm+0x128/0x210
[  315.070482][ T6464]  kvm_arch_init_vm+0x64/0x680
[  315.075579][ T6464]  kvm_dev_ioctl+0xc00/0x1c70
[  315.080485][ T6464]  ? kvm_stat_data_open+0x380/0x380
[  315.086065][ T6464]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  315.092649][ T6464]  ? kvm_stat_data_open+0x380/0x380
[  315.098783][ T6464]  __do_compat_sys_ioctl+0x1c7/0x290
[  315.104386][ T6464]  __do_fast_syscall_32+0x65/0xf0
[  315.109789][ T6464]  do_fast_syscall_32+0x2f/0x70
[  315.115287][ T6464]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.122568][ T6464] RIP: 0023:0xf7f6f549
[  315.127465][ T6464] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  315.147525][ T6464] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  315.156193][ T6464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  315.164730][ T6464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  315.172549][ T6464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  315.180252][ T6464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  315.188814][ T6464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  315.196987][ T6464]  </TASK>
23:00:24 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x40480)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2400)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  315.209112][ T6471] FAULT_INJECTION: forcing a failure.
23:00:24 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x92841)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:24 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 31)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:24 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f00)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  315.209112][ T6471] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  315.231178][ T6471] CPU: 1 PID: 6471 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  315.241536][ T6471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  315.250338][ T6471] Call Trace:
[  315.253555][ T6471]  <TASK>
[  315.256452][ T6471]  dump_stack_lvl+0xcd/0x134
[  315.260939][ T6471]  should_fail.cold+0x5/0xa
[  315.265407][ T6471]  prepare_alloc_pages+0x17b/0x570
[  315.270460][ T6471]  ? lock_release+0x720/0x720
[  315.274980][ T6471]  __alloc_pages+0x12f/0x500
[  315.279494][ T6471]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  315.286127][ T6471]  ? mark_held_locks+0x9f/0xe0
[  315.290824][ T6471]  allocate_slab+0x80/0x3c0
[  315.295263][ T6471]  ___slab_alloc+0x8df/0xf20
[  315.299782][ T6471]  ? alloc_unbound_pwq+0x4a5/0xce0
[  315.304769][ T6471]  ? alloc_unbound_pwq+0x4a5/0xce0
[  315.309760][ T6471]  __slab_alloc.constprop.0+0x4d/0xa0
[  315.315074][ T6471]  kmem_cache_alloc_node+0x122/0x3f0
[  315.320239][ T6471]  ? alloc_unbound_pwq+0x4a5/0xce0
[  315.325299][ T6471]  alloc_unbound_pwq+0x4a5/0xce0
[  315.330175][ T6471]  apply_wqattrs_prepare+0x624/0x890
[  315.335380][ T6471]  apply_workqueue_attrs_locked+0xc1/0x140
[  315.341118][ T6471]  alloc_workqueue+0xb33/0xf00
[  315.345791][ T6471]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  315.351445][ T6471]  ? init_srcu_struct_fields+0xcb2/0x1360
[  315.357101][ T6471]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  315.362347][ T6471]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  315.367368][ T6471]  kvm_mmu_init_vm+0x128/0x210
[  315.372079][ T6471]  kvm_arch_init_vm+0x64/0x680
[  315.376903][ T6471]  kvm_dev_ioctl+0xc00/0x1c70
[  315.381504][ T6471]  ? kvm_stat_data_open+0x380/0x380
[  315.386742][ T6471]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  315.393429][ T6471]  ? kvm_stat_data_open+0x380/0x380
[  315.398601][ T6471]  __do_compat_sys_ioctl+0x1c7/0x290
[  315.403822][ T6471]  __do_fast_syscall_32+0x65/0xf0
[  315.408851][ T6471]  do_fast_syscall_32+0x2f/0x70
[  315.413735][ T6471]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.420154][ T6471] RIP: 0023:0xf7fa4549
[  315.424185][ T6471] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  315.443335][ T6471] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  315.451575][ T6471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  315.459418][ T6471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  315.467165][ T6471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  315.475047][ T6471] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  315.482714][ T6471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  315.490928][ T6471]  </TASK>
[  315.496568][ T6482] FAULT_INJECTION: forcing a failure.
[  315.496568][ T6482] name failslab, interval 1, probability 0, space 0, times 0
[  315.513846][ T6482] CPU: 2 PID: 6482 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  315.526784][ T6482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  315.537828][ T6482] Call Trace:
[  315.541891][ T6482]  <TASK>
[  315.545597][ T6482]  dump_stack_lvl+0xcd/0x134
[  315.551399][ T6482]  should_fail.cold+0x5/0xa
[  315.557211][ T6482]  ? alloc_worker+0x43/0x1c0
[  315.563683][ T6482]  should_failslab+0x5/0x10
[  315.570216][ T6482]  kmem_cache_alloc_node_trace+0x59/0x310
[  315.577358][ T6482]  alloc_worker+0x43/0x1c0
[  315.582801][ T6482]  init_rescuer+0x6d/0x1d0
[  315.587786][ T6482]  alloc_workqueue+0xbf7/0xf00
[  315.592653][ T6482]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  315.598323][ T6482]  ? init_srcu_struct_fields+0xcb2/0x1360
[  315.604033][ T6482]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  315.609210][ T6482]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  315.614356][ T6482]  kvm_mmu_init_vm+0x128/0x210
[  315.619082][ T6482]  kvm_arch_init_vm+0x64/0x680
[  315.623736][ T6482]  kvm_dev_ioctl+0xc00/0x1c70
[  315.628352][ T6482]  ? kvm_stat_data_open+0x380/0x380
[  315.633398][ T6482]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  315.639499][ T6482]  ? kvm_stat_data_open+0x380/0x380
[  315.644570][ T6482]  __do_compat_sys_ioctl+0x1c7/0x290
[  315.649899][ T6482]  __do_fast_syscall_32+0x65/0xf0
[  315.654840][ T6482]  do_fast_syscall_32+0x2f/0x70
[  315.659649][ T6482]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  315.665894][ T6482] RIP: 0023:0xf7f6f549
[  315.669975][ T6482] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  315.689326][ T6482] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  315.697519][ T6482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  315.705324][ T6482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  315.713146][ T6482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  315.720898][ T6482] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  315.728729][ T6482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  315.736686][ T6482]  </TASK>
23:00:25 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 31)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:25 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x92841)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:25 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4900)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:25 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 32)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  315.845306][ T6488] FAULT_INJECTION: forcing a failure.
[  315.845306][ T6488] name failslab, interval 1, probability 0, space 0, times 0
23:00:25 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x92841)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)

23:00:25 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x7903)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  315.861626][ T6488] CPU: 0 PID: 6488 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  315.875896][ T6488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  315.886361][ T6488] Call Trace:
[  315.887534][ T6493] FAULT_INJECTION: forcing a failure.
[  315.887534][ T6493] name failslab, interval 1, probability 0, space 0, times 0
[  315.889648][ T6488]  <TASK>
[  315.905842][ T6488]  dump_stack_lvl+0xcd/0x134
[  315.911879][ T6488]  should_fail.cold+0x5/0xa
[  315.917932][ T6488]  ? alloc_worker+0x43/0x1c0
[  315.924194][ T6488]  should_failslab+0x5/0x10
[  315.929875][ T6488]  kmem_cache_alloc_node_trace+0x59/0x310
[  315.937080][ T6488]  alloc_worker+0x43/0x1c0
[  315.942610][ T6488]  init_rescuer+0x6d/0x1d0
[  315.948214][ T6488]  alloc_workqueue+0xbf7/0xf00
[  315.954055][ T6488]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  315.961063][ T6488]  ? init_srcu_struct_fields+0xcb2/0x1360
23:00:25 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x80240)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000081)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r4)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d168fabfc6823137eb99b000024ef43a9dc863b00a18f038bd5df3c2e8e574c451d57638a40d0b430c20dde56490b", @ANYRES16=r5, @ANYBLOB="020026bd7000ffdbdf250300000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4090)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket(0x27, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x4937, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x89}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r6, 0x29, 0xfb, 0x6, 0x7, 0x31, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x2}})

[  315.968205][ T6488]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  315.974980][ T6488]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  315.980290][ T6488]  kvm_mmu_init_vm+0x128/0x210
[  315.984935][ T6488]  kvm_arch_init_vm+0x64/0x680
[  315.989576][ T6488]  kvm_dev_ioctl+0xc00/0x1c70
[  315.994219][ T6488]  ? kvm_stat_data_open+0x380/0x380
[  315.999332][ T6488]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  316.005542][ T6488]  ? kvm_stat_data_open+0x380/0x380
[  316.010701][ T6488]  __do_compat_sys_ioctl+0x1c7/0x290
[  316.015954][ T6488]  __do_fast_syscall_32+0x65/0xf0
[  316.020912][ T6488]  do_fast_syscall_32+0x2f/0x70
[  316.025563][ T6488]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.031870][ T6488] RIP: 0023:0xf7f6f549
[  316.035898][ T6488] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  316.055230][ T6488] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  316.063472][ T6488] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  316.071317][ T6488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  316.079130][ T6488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  316.087083][ T6488] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  316.095050][ T6488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  316.102647][ T6488]  </TASK>
23:00:25 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8e00)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  316.105632][ T6493] CPU: 1 PID: 6493 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  316.116556][ T6493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  316.125515][ T6493] Call Trace:
[  316.128820][ T6493]  <TASK>
[  316.131734][ T6493]  dump_stack_lvl+0xcd/0x134
[  316.136713][ T6493]  should_fail.cold+0x5/0xa
[  316.141155][ T6493]  should_failslab+0x5/0x10
[  316.146053][ T6493]  kmem_cache_alloc_node+0x65/0x3f0
[  316.151158][ T6493]  ? alloc_unbound_pwq+0x4a5/0xce0
[  316.156386][ T6493]  alloc_unbound_pwq+0x4a5/0xce0
[  316.161198][ T6493]  apply_wqattrs_prepare+0x624/0x890
[  316.166336][ T6493]  apply_workqueue_attrs_locked+0xc1/0x140
[  316.171923][ T6493]  alloc_workqueue+0xb33/0xf00
[  316.176758][ T6493]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  316.182317][ T6493]  ? init_srcu_struct_fields+0xcb2/0x1360
[  316.187896][ T6493]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  316.193122][ T6493]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  316.198119][ T6493]  kvm_mmu_init_vm+0x128/0x210
[  316.202750][ T6493]  kvm_arch_init_vm+0x64/0x680
[  316.207381][ T6493]  kvm_dev_ioctl+0xc00/0x1c70
[  316.211964][ T6493]  ? kvm_stat_data_open+0x380/0x380
[  316.217022][ T6493]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  316.223067][ T6493]  ? kvm_stat_data_open+0x380/0x380
[  316.228109][ T6493]  __do_compat_sys_ioctl+0x1c7/0x290
[  316.233080][ T6493]  __do_fast_syscall_32+0x65/0xf0
[  316.237893][ T6493]  do_fast_syscall_32+0x2f/0x70
[  316.242626][ T6493]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.248620][ T6493] RIP: 0023:0xf7fa4549
[  316.252316][ T6493] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  316.271898][ T6493] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  316.280683][ T6493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  316.288548][ T6493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  316.296253][ T6493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  316.304837][ T6493] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  316.312522][ T6493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  316.320269][ T6493]  </TASK>
23:00:26 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 32)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:26 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x80240)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000081)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r4)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d168fabfc6823137eb99b000024ef43a9dc863b00a18f038bd5df3c2e8e574c451d57638a40d0b430c20dde56490b", @ANYRES16=r5, @ANYBLOB="020026bd7000ffdbdf250300000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4090)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket(0x27, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x4937, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x89}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r6, 0x29, 0xfb, 0x6, 0x7, 0x31, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x2}})
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x800) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x80240) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000081) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r4) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d168fabfc6823137eb99b000024ef43a9dc863b00a18f038bd5df3c2e8e574c451d57638a40d0b430c20dde56490b", @ANYRES16=r5, @ANYBLOB="020026bd7000ffdbdf250300000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4090) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) (async)
syz_open_dev$dri(0x0, 0x0, 0x0) (async)
socket(0x27, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) (async)
syz_io_uring_setup(0x4937, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x89}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r6, 0x29, 0xfb, 0x6, 0x7, 0x31, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x2}}) (async)

23:00:26 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 33)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  316.354180][ T6512] FAULT_INJECTION: forcing a failure.
23:00:26 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x80240)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000081)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r4)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d168fabfc6823137eb99b000024ef43a9dc863b00a18f038bd5df3c2e8e574c451d57638a40d0b430c20dde56490b", @ANYRES16=r5, @ANYBLOB="020026bd7000ffdbdf250300000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4090)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket(0x27, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x4937, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x89}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r6, 0x29, 0xfb, 0x6, 0x7, 0x31, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x2}})
openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x800) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x80240) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000081) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r4) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d168fabfc6823137eb99b000024ef43a9dc863b00a18f038bd5df3c2e8e574c451d57638a40d0b430c20dde56490b", @ANYRES16=r5, @ANYBLOB="020026bd7000ffdbdf250300000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4090) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) (async)
syz_open_dev$dri(0x0, 0x0, 0x0) (async)
socket(0x27, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) (async)
syz_io_uring_setup(0x4937, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x89}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r6, 0x29, 0xfb, 0x6, 0x7, 0x31, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x2}}) (async)

[  316.354180][ T6512] name failslab, interval 1, probability 0, space 0, times 0
23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9001)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  316.367850][ T6519] FAULT_INJECTION: forcing a failure.
[  316.367850][ T6519] name failslab, interval 1, probability 0, space 0, times 0
23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xad03)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  316.370851][ T6512] CPU: 2 PID: 6512 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  316.396613][ T6512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  316.405515][ T6512] Call Trace:
[  316.408786][ T6512]  <TASK>
[  316.411786][ T6512]  dump_stack_lvl+0xcd/0x134
[  316.416364][ T6512]  should_fail.cold+0x5/0xa
[  316.420769][ T6512]  should_failslab+0x5/0x10
[  316.425213][ T6512]  kmem_cache_alloc_trace+0x60/0x3f0
[  316.430699][ T6512]  ? __kthread_create_on_node+0xe2/0x550
[  316.436233][ T6512]  ? worker_thread+0x1080/0x1080
[  316.441090][ T6512]  __kthread_create_on_node+0xe2/0x550
[  316.446452][ T6512]  ? __kasan_kmalloc+0xa9/0xd0
[  316.451026][ T6512]  ? alloc_worker+0x43/0x1c0
[  316.455847][ T6512]  ? kthread_parkme+0xa0/0xa0
23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  316.460458][ T6512]  ? kvm_mmu_init_vm+0x128/0x210
[  316.466520][ T6512]  ? kvm_arch_init_vm+0x64/0x680
[  316.473461][ T6512]  ? kvm_dev_ioctl+0xc00/0x1c70
[  316.479865][ T6512]  ? __do_compat_sys_ioctl+0x1c7/0x290
[  316.488113][ T6512]  ? __do_fast_syscall_32+0x65/0xf0
[  316.494918][ T6512]  ? do_fast_syscall_32+0x2f/0x70
[  316.501491][ T6512]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.509907][ T6512]  ? alloc_worker+0x43/0x1c0
[  316.515660][ T6512]  ? worker_thread+0x1080/0x1080
[  316.521921][ T6512]  kthread_create_on_node+0xbb/0xf0
[  316.528852][ T6512]  ? __kthread_create_on_node+0x550/0x550
[  316.536630][ T6512]  ? rcu_read_lock_sched_held+0x3a/0x70
[  316.543841][ T6512]  ? trace_kmalloc_node+0x32/0x100
[  316.550535][ T6512]  init_rescuer+0xc9/0x1d0
[  316.556633][ T6512]  alloc_workqueue+0xbf7/0xf00
[  316.562940][ T6512]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  316.571210][ T6512]  ? init_srcu_struct_fields+0xcb2/0x1360
[  316.578826][ T6512]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  316.585677][ T6512]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  316.592385][ T6512]  kvm_mmu_init_vm+0x128/0x210
[  316.598599][ T6512]  kvm_arch_init_vm+0x64/0x680
[  316.604843][ T6512]  kvm_dev_ioctl+0xc00/0x1c70
[  316.610984][ T6512]  ? kvm_stat_data_open+0x380/0x380
[  316.616429][ T6512]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  316.622878][ T6512]  ? kvm_stat_data_open+0x380/0x380
[  316.628230][ T6512]  __do_compat_sys_ioctl+0x1c7/0x290
[  316.633703][ T6512]  __do_fast_syscall_32+0x65/0xf0
[  316.638895][ T6512]  do_fast_syscall_32+0x2f/0x70
[  316.643979][ T6512]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.650494][ T6512] RIP: 0023:0xf7fa4549
[  316.654685][ T6512] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  316.675911][ T6512] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  316.684721][ T6512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  316.693118][ T6512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  316.701233][ T6512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  316.709586][ T6512] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  316.717921][ T6512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  316.726267][ T6512]  </TASK>
[  316.729404][ T6519] CPU: 1 PID: 6519 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  316.739883][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  316.748646][ T6519] Call Trace:
[  316.752000][ T6519]  <TASK>
[  316.754864][ T6519]  dump_stack_lvl+0xcd/0x134
[  316.759326][ T6519]  should_fail.cold+0x5/0xa
[  316.763709][ T6519]  should_failslab+0x5/0x10
[  316.768091][ T6519]  kmem_cache_alloc_trace+0x60/0x3f0
[  316.773235][ T6519]  ? __kthread_create_on_node+0xe2/0x550
[  316.779093][ T6519]  ? worker_thread+0x1080/0x1080
[  316.784102][ T6519]  __kthread_create_on_node+0xe2/0x550
[  316.789447][ T6519]  ? __kasan_kmalloc+0xa9/0xd0
[  316.794046][ T6519]  ? alloc_worker+0x43/0x1c0
[  316.798743][ T6519]  ? kthread_parkme+0xa0/0xa0
[  316.803367][ T6519]  ? kvm_mmu_init_vm+0x128/0x210
[  316.808249][ T6519]  ? kvm_arch_init_vm+0x64/0x680
[  316.813123][ T6519]  ? kvm_dev_ioctl+0xc00/0x1c70
[  316.817981][ T6519]  ? __do_compat_sys_ioctl+0x1c7/0x290
[  316.823497][ T6519]  ? __do_fast_syscall_32+0x65/0xf0
[  316.828726][ T6519]  ? do_fast_syscall_32+0x2f/0x70
[  316.833507][ T6519]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.839984][ T6519]  ? find_held_lock+0x2d/0x110
[  316.845279][ T6519]  ? worker_thread+0x1080/0x1080
[  316.851190][ T6519]  kthread_create_on_node+0xbb/0xf0
[  316.856856][ T6519]  ? __kthread_create_on_node+0x550/0x550
[  316.862902][ T6519]  ? rcu_read_lock_sched_held+0x3a/0x70
[  316.869672][ T6519]  ? trace_kmalloc_node+0x32/0x100
[  316.876047][ T6519]  init_rescuer+0xc9/0x1d0
[  316.881647][ T6519]  alloc_workqueue+0xbf7/0xf00
[  316.887677][ T6519]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  316.894757][ T6519]  ? init_srcu_struct_fields+0xcb2/0x1360
[  316.901996][ T6519]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  316.908533][ T6519]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  316.914874][ T6519]  kvm_mmu_init_vm+0x128/0x210
[  316.920804][ T6519]  kvm_arch_init_vm+0x64/0x680
[  316.926698][ T6519]  kvm_dev_ioctl+0xc00/0x1c70
[  316.932457][ T6519]  ? kvm_stat_data_open+0x380/0x380
[  316.939006][ T6519]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  316.945095][ T6519]  ? kvm_stat_data_open+0x380/0x380
[  316.950182][ T6519]  __do_compat_sys_ioctl+0x1c7/0x290
[  316.955234][ T6519]  __do_fast_syscall_32+0x65/0xf0
[  316.960192][ T6519]  do_fast_syscall_32+0x2f/0x70
[  316.964924][ T6519]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  316.971078][ T6519] RIP: 0023:0xf7f6f549
[  316.975011][ T6519] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  316.993988][ T6519] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  317.004230][ T6519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  317.013596][ T6519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.023075][ T6519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.032815][ T6519] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  317.041764][ T6519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.051591][ T6519]  </TASK>
23:00:26 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 33)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xff00)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:26 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
syz_open_dev$vcsu(&(0x7f0000000040), 0x80000000, 0x400)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x22000)
openat$proc_capi20(0xffffff9c, &(0x7f0000000180), 0x14000, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc04c561a, &(0x7f0000000100)={0x0, "c44dd90fb8671dcad37d5f24ff7723621b0c545f6ebaabebca05acb212e114a4", 0x3, 0x7, 0x1, 0x100, 0x5020a00, 0x2})

23:00:26 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 34)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:26 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
syz_open_dev$vcsu(&(0x7f0000000040), 0x80000000, 0x400) (async)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x22000) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000180), 0x14000, 0x0)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0) (async)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
r2 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc04c561a, &(0x7f0000000100)={0x0, "c44dd90fb8671dcad37d5f24ff7723621b0c545f6ebaabebca05acb212e114a4", 0x3, 0x7, 0x1, 0x100, 0x5020a00, 0x2})

[  317.093955][ T6541] FAULT_INJECTION: forcing a failure.
[  317.093955][ T6541] name failslab, interval 1, probability 0, space 0, times 0
23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc00000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  317.116318][ T6541] CPU: 2 PID: 6541 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  317.129371][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  317.139627][ T6541] Call Trace:
[  317.143045][ T6541]  <TASK>
[  317.146359][ T6541]  dump_stack_lvl+0xcd/0x134
[  317.151796][ T6541]  should_fail.cold+0x5/0xa
23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  317.157035][ T6541]  should_failslab+0x5/0x10
[  317.162040][ T6541]  kmem_cache_alloc_trace+0x60/0x3f0
[  317.169253][ T6541]  ? __kthread_create_on_node+0xe2/0x550
[  317.175763][ T6541]  ? worker_thread+0x1080/0x1080
[  317.181111][ T6541]  __kthread_create_on_node+0xe2/0x550
23:00:26 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  317.187752][ T6541]  ? __kasan_kmalloc+0xa9/0xd0
[  317.193799][ T6541]  ? alloc_worker+0x43/0x1c0
[  317.198764][ T6541]  ? kthread_parkme+0xa0/0xa0
[  317.203366][ T6541]  ? kvm_mmu_init_vm+0x128/0x210
[  317.204647][ T6540] FAULT_INJECTION: forcing a failure.
[  317.204647][ T6540] name failslab, interval 1, probability 0, space 0, times 0
[  317.208248][ T6541]  ? kvm_arch_init_vm+0x64/0x680
[  317.226001][ T6541]  ? kvm_dev_ioctl+0xc00/0x1c70
[  317.230888][ T6541]  ? __do_compat_sys_ioctl+0x1c7/0x290
[  317.236490][ T6541]  ? __do_fast_syscall_32+0x65/0xf0
[  317.241650][ T6541]  ? do_fast_syscall_32+0x2f/0x70
[  317.246820][ T6541]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  317.253632][ T6541]  ? alloc_worker+0x43/0x1c0
[  317.258356][ T6541]  ? worker_thread+0x1080/0x1080
[  317.263512][ T6541]  kthread_create_on_node+0xbb/0xf0
[  317.268745][ T6541]  ? __kthread_create_on_node+0x550/0x550
[  317.274623][ T6541]  ? rcu_read_lock_sched_held+0x3a/0x70
[  317.280526][ T6541]  ? trace_kmalloc_node+0x32/0x100
[  317.286731][ T6541]  init_rescuer+0xc9/0x1d0
[  317.292050][ T6541]  alloc_workqueue+0xbf7/0xf00
[  317.297918][ T6541]  ? workqueue_sysfs_register+0x3e0/0x3e0
[  317.304822][ T6541]  ? init_srcu_struct_fields+0xcb2/0x1360
[  317.311725][ T6541]  ? kvm_mmu_init_tdp_mmu+0x61/0x230
[  317.318122][ T6541]  kvm_mmu_init_tdp_mmu+0x8e/0x230
[  317.324566][ T6541]  kvm_mmu_init_vm+0x128/0x210
[  317.330869][ T6541]  kvm_arch_init_vm+0x64/0x680
[  317.336615][ T6541]  kvm_dev_ioctl+0xc00/0x1c70
[  317.342188][ T6541]  ? kvm_stat_data_open+0x380/0x380
[  317.348576][ T6541]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  317.356170][ T6541]  ? kvm_stat_data_open+0x380/0x380
[  317.362584][ T6541]  __do_compat_sys_ioctl+0x1c7/0x290
[  317.369040][ T6541]  __do_fast_syscall_32+0x65/0xf0
[  317.375175][ T6541]  do_fast_syscall_32+0x2f/0x70
[  317.381133][ T6541]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  317.388876][ T6541] RIP: 0023:0xf7fa4549
[  317.393771][ T6541] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  317.416437][ T6541] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  317.424828][ T6541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  317.432851][ T6541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.440764][ T6541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.448724][ T6541] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  317.456802][ T6541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.464760][ T6541]  </TASK>
[  317.467955][ T6540] CPU: 0 PID: 6540 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  317.479089][ T6540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  317.487989][ T6540] Call Trace:
[  317.491218][ T6540]  <TASK>
[  317.494074][ T6540]  dump_stack_lvl+0xcd/0x134
[  317.498646][ T6540]  should_fail.cold+0x5/0xa
[  317.503094][ T6540]  should_failslab+0x5/0x10
[  317.507917][ T6540]  kmem_cache_alloc_trace+0x60/0x3f0
[  317.513051][ T6540]  ? __kthread_create_on_node+0xe2/0x550
[  317.518770][ T6540]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  317.524989][ T6540]  __kthread_create_on_node+0xe2/0x550
[  317.530408][ T6540]  ? kthread_parkme+0xa0/0xa0
[  317.535049][ T6540]  ? verify_cpu+0xf0/0x100
[  317.539446][ T6540]  ? __lock_acquire+0x163e/0x56c0
[  317.544386][ T6540]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  317.549859][ T6540]  kthread_create_on_node+0xbb/0xf0
[  317.555046][ T6540]  ? __kthread_create_on_node+0x550/0x550
[  317.560672][ T6540]  ? lock_downgrade+0x6e0/0x6e0
[  317.565355][ T6540]  ? lockdep_init_map_type+0x21a/0x7f0
[  317.570652][ T6540]  kvm_vm_create_worker_thread+0x139/0x240
[  317.577145][ T6540]  ? kvm_mmu_pte_write+0xd90/0xd90
[  317.582281][ T6540]  ? kvm_unregister_perf_callbacks+0x20/0x20
[  317.588228][ T6540]  ? kvm_mmu_pte_write+0xd90/0xd90
[  317.593339][ T6540]  ? up_write+0x148/0x470
[  317.597701][ T6540]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  317.604159][ T6540]  kvm_mmu_post_init_vm+0x2e/0x90
[  317.609338][ T6540]  kvm_dev_ioctl+0xf9d/0x1c70
[  317.613952][ T6540]  ? kvm_stat_data_open+0x380/0x380
[  317.619528][ T6540]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  317.625595][ T6540]  ? kvm_stat_data_open+0x380/0x380
[  317.631101][ T6540]  __do_compat_sys_ioctl+0x1c7/0x290
[  317.636650][ T6540]  __do_fast_syscall_32+0x65/0xf0
[  317.641958][ T6540]  do_fast_syscall_32+0x2f/0x70
[  317.647549][ T6540]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  317.654010][ T6540] RIP: 0023:0xf7f6f549
[  317.658005][ T6540] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  317.677486][ T6540] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  317.685996][ T6540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  317.694354][ T6540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.702359][ T6540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.710170][ T6540] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  317.718014][ T6540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.726126][ T6540]  </TASK>
23:00:27 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 34)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:27 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:27 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
syz_open_dev$vcsu(&(0x7f0000000040), 0x80000000, 0x400)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x22000) (async)
openat$proc_capi20(0xffffff9c, &(0x7f0000000180), 0x14000, 0x0) (async)
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0) (async)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
r2 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc04c561a, &(0x7f0000000100)={0x0, "c44dd90fb8671dcad37d5f24ff7723621b0c545f6ebaabebca05acb212e114a4", 0x3, 0x7, 0x1, 0x100, 0x5020a00, 0x2})

[  317.762078][ T6566] FAULT_INJECTION: forcing a failure.
[  317.762078][ T6566] name failslab, interval 1, probability 0, space 0, times 0
[  317.782760][ T6566] CPU: 3 PID: 6566 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
23:00:27 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 35)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:27 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xb02d0b2e9f4099c1)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x1, 0xe6a7})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

23:00:27 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  317.795283][ T6566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  317.806464][ T6566] Call Trace:
[  317.810529][ T6566]  <TASK>
[  317.814201][ T6566]  dump_stack_lvl+0xcd/0x134
[  317.819827][ T6566]  should_fail.cold+0x5/0xa
[  317.825629][ T6566]  should_failslab+0x5/0x10
[  317.831257][ T6566]  kmem_cache_alloc_trace+0x60/0x3f0
[  317.837622][ T6566]  ? __kthread_create_on_node+0xe2/0x550
[  317.843665][ T6566]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  317.849285][ T6566]  __kthread_create_on_node+0xe2/0x550
[  317.854739][ T6566]  ? kthread_parkme+0xa0/0xa0
[  317.859354][ T6566]  ? verify_cpu+0xf0/0x100
[  317.863712][ T6566]  ? __lock_acquire+0x163e/0x56c0
[  317.868789][ T6566]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  317.874192][ T6566]  kthread_create_on_node+0xbb/0xf0
[  317.879426][ T6566]  ? __kthread_create_on_node+0x550/0x550
[  317.885122][ T6566]  ? lock_downgrade+0x6e0/0x6e0
[  317.890010][ T6566]  ? lockdep_init_map_type+0x21a/0x7f0
[  317.895220][ T6566]  kvm_vm_create_worker_thread+0x139/0x240
[  317.899891][ T6578] FAULT_INJECTION: forcing a failure.
[  317.899891][ T6578] name failslab, interval 1, probability 0, space 0, times 0
[  317.900904][ T6566]  ? kvm_mmu_pte_write+0xd90/0xd90
[  317.900934][ T6566]  ? kvm_unregister_perf_callbacks+0x20/0x20
[  317.900963][ T6566]  ? kvm_mmu_pte_write+0xd90/0xd90
[  317.929326][ T6566]  ? up_write+0x148/0x470
[  317.933577][ T6566]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  317.939675][ T6566]  kvm_mmu_post_init_vm+0x2e/0x90
[  317.944599][ T6566]  kvm_dev_ioctl+0xf9d/0x1c70
[  317.949182][ T6566]  ? kvm_stat_data_open+0x380/0x380
[  317.954083][ T6566]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  317.960220][ T6566]  ? kvm_stat_data_open+0x380/0x380
[  317.965155][ T6566]  __do_compat_sys_ioctl+0x1c7/0x290
[  317.970118][ T6566]  __do_fast_syscall_32+0x65/0xf0
[  317.975027][ T6566]  do_fast_syscall_32+0x2f/0x70
[  317.979737][ T6566]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  317.985881][ T6566] RIP: 0023:0xf7fa4549
[  317.989810][ T6566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  318.008473][ T6566] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  318.017143][ T6566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  318.026697][ T6566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  318.036348][ T6566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.046323][ T6566] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  318.055927][ T6566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.065783][ T6566]  </TASK>
23:00:27 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0) (async, rerun: 64)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xb02d0b2e9f4099c1) (rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x1, 0xe6a7}) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)

23:00:27 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  318.069513][ T6578] CPU: 2 PID: 6578 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  318.080271][ T6578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  318.089690][ T6578] Call Trace:
[  318.092934][ T6578]  <TASK>
[  318.096021][ T6578]  dump_stack_lvl+0xcd/0x134
[  318.100539][ T6578]  should_fail.cold+0x5/0xa
[  318.105384][ T6578]  should_failslab+0x5/0x10
[  318.110598][ T6578]  __kmalloc_track_caller+0x79/0x320
[  318.116725][ T6578]  ? __kthread_create_on_node+0x3b0/0x550
[  318.123631][ T6578]  kvasprintf+0xb5/0x150
[  318.128907][ T6578]  ? bust_spinlocks+0xe0/0xe0
[  318.134745][ T6578]  ? rwlock_bug.part.0+0x90/0x90
[  318.139732][ T6578]  ? trace_kmalloc+0x32/0xf0
[  318.144400][ T6578]  __kthread_create_on_node+0x3b0/0x550
[  318.149880][ T6578]  ? kthread_parkme+0xa0/0xa0
[  318.154619][ T6578]  ? verify_cpu+0xf0/0x100
[  318.159019][ T6578]  ? __lock_acquire+0x163e/0x56c0
[  318.163930][ T6578]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  318.169293][ T6578]  kthread_create_on_node+0xbb/0xf0
[  318.174638][ T6578]  ? __kthread_create_on_node+0x550/0x550
[  318.180205][ T6578]  ? lock_downgrade+0x6e0/0x6e0
[  318.184926][ T6578]  ? lockdep_init_map_type+0x21a/0x7f0
[  318.190252][ T6578]  kvm_vm_create_worker_thread+0x139/0x240
[  318.195977][ T6578]  ? kvm_mmu_pte_write+0xd90/0xd90
[  318.201030][ T6578]  ? kvm_unregister_perf_callbacks+0x20/0x20
[  318.206597][ T6578]  ? kvm_mmu_pte_write+0xd90/0xd90
[  318.211689][ T6578]  ? up_write+0x148/0x470
[  318.215947][ T6578]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  318.221932][ T6578]  kvm_mmu_post_init_vm+0x2e/0x90
[  318.226833][ T6578]  kvm_dev_ioctl+0xf9d/0x1c70
[  318.231170][ T6578]  ? kvm_stat_data_open+0x380/0x380
[  318.236327][ T6578]  ? __do_compat_sys_ioctl+0x59/0x290
[  318.241816][ T6578]  ? __do_compat_sys_ioctl+0x66/0x290
[  318.247262][ T6578]  ? kvm_stat_data_open+0x380/0x380
[  318.252357][ T6578]  __do_compat_sys_ioctl+0x1c7/0x290
[  318.257440][ T6578]  __do_fast_syscall_32+0x65/0xf0
[  318.262597][ T6578]  do_fast_syscall_32+0x2f/0x70
[  318.267331][ T6578]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  318.273550][ T6578] RIP: 0023:0xf7f6f549
[  318.277542][ T6578] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  318.296594][ T6578] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  318.304874][ T6578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  318.312611][ T6578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  318.320356][ T6578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.328102][ T6578] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  318.335899][ T6578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.343689][ T6578]  </TASK>
23:00:28 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 35)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:28 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0) (async)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xb02d0b2e9f4099c1)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x1, 0xe6a7}) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

23:00:28 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  318.425454][ T6592] FAULT_INJECTION: forcing a failure.
[  318.425454][ T6592] name failslab, interval 1, probability 0, space 0, times 0
[  318.438618][ T6592] CPU: 1 PID: 6592 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  318.448789][ T6592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  318.457559][ T6592] Call Trace:
[  318.460786][ T6592]  <TASK>
[  318.463663][ T6592]  dump_stack_lvl+0xcd/0x134
[  318.468227][ T6592]  should_fail.cold+0x5/0xa
[  318.472755][ T6592]  should_failslab+0x5/0x10
[  318.477164][ T6592]  kmem_cache_alloc_trace+0x60/0x3f0
[  318.482381][ T6592]  ? __kthread_create_on_node+0xe2/0x550
[  318.487926][ T6592]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  318.493380][ T6592]  __kthread_create_on_node+0xe2/0x550
[  318.498837][ T6592]  ? kthread_parkme+0xa0/0xa0
[  318.503443][ T6592]  ? verify_cpu+0xf0/0x100
[  318.507762][ T6592]  ? __lock_acquire+0x163e/0x56c0
[  318.512835][ T6592]  ? __bpf_trace_kvm_age_hva+0xe0/0xe0
[  318.518175][ T6592]  kthread_create_on_node+0xbb/0xf0
[  318.523294][ T6592]  ? __kthread_create_on_node+0x550/0x550
[  318.528948][ T6592]  ? lock_downgrade+0x6e0/0x6e0
[  318.533722][ T6592]  ? lockdep_init_map_type+0x21a/0x7f0
[  318.539114][ T6592]  kvm_vm_create_worker_thread+0x139/0x240
[  318.544852][ T6592]  ? kvm_mmu_pte_write+0xd90/0xd90
[  318.549919][ T6592]  ? kvm_unregister_perf_callbacks+0x20/0x20
[  318.555772][ T6592]  ? kvm_mmu_pte_write+0xd90/0xd90
[  318.560771][ T6592]  ? up_write+0x148/0x470
[  318.564984][ T6592]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  318.571125][ T6592]  kvm_mmu_post_init_vm+0x2e/0x90
[  318.576019][ T6592]  kvm_dev_ioctl+0xf9d/0x1c70
[  318.580637][ T6592]  ? kvm_stat_data_open+0x380/0x380
[  318.585710][ T6592]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  318.591598][ T6592]  ? kvm_stat_data_open+0x380/0x380
[  318.596667][ T6592]  __do_compat_sys_ioctl+0x1c7/0x290
[  318.601832][ T6592]  __do_fast_syscall_32+0x65/0xf0
[  318.606766][ T6592]  do_fast_syscall_32+0x2f/0x70
[  318.611503][ T6592]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  318.617644][ T6592] RIP: 0023:0xf7fa4549
[  318.621660][ T6592] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  318.640983][ T6592] RSP: 002b:00000000f7f9f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  318.649204][ T6592] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  318.656951][ T6592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  318.664749][ T6592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.672591][ T6592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  318.680406][ T6592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.688266][ T6592]  </TASK>
23:00:28 executing program 3:
r0 = openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 36)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0x8}, 0x0, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$proc_capi20(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x0, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:28 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
r1 = getpid()
r2 = getpgid(r1)
r3 = getpgrp(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_delroute={0x28, 0x19, 0x200, 0x70bd2a, 0x25dfdbff, {0x80, 0x14, 0x14, 0x0, 0xfd, 0x1, 0xc8, 0x7, 0xe00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d0}, 0x20004044)
getpgid(r3)
getpgrp(r3)

23:00:28 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x7000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

23:00:28 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0) (async)
r1 = getpid()
r2 = getpgid(r1)
r3 = getpgrp(r2) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_delroute={0x28, 0x19, 0x200, 0x70bd2a, 0x25dfdbff, {0x80, 0x14, 0x14, 0x0, 0xfd, 0x1, 0xc8, 0x7, 0xe00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d0}, 0x20004044) (async)
getpgid(r3) (async)
getpgrp(r3)

23:00:28 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  318.745303][ T6600] FAULT_INJECTION: forcing a failure.
[  318.745303][ T6600] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:00:28 executing program 0:
openat$proc_capi20(0xffffff9c, 0x0, 0x206240, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 36)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)

23:00:28 executing program 2:
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, 0x0)
r1 = getpid()
r2 = getpgid(r1)
r3 = getpgrp(r2) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_delroute={0x28, 0x19, 0x200, 0x70bd2a, 0x25dfdbff, {0x80, 0x14, 0x14, 0x0, 0xfd, 0x1, 0xc8, 0x7, 0xe00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d0}, 0x20004044) (async, rerun: 32)
getpgid(r3) (rerun: 32)
getpgrp(r3)

23:00:28 executing program 1:
r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x206240, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, {0x3, 0x8, 0x4}}, 0xa)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb000000)
r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000200), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x1, 0x8}, 0x5c8, 0x8})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, 0x0)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/166, 0xa6, 0x5, 0x39d, 0x7fffffff, 0x7fffffff, 0xa779}}, 0x11c)

[  318.778393][ T6600] CPU: 0 PID: 6600 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  318.791308][ T6600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  318.800369][ T6614] FAULT_INJECTION: forcing a failure.
[  318.800369][ T6614] name failslab, interval 1, probability 0, space 0, times 0
[  318.801890][ T6600] Call Trace:
[  318.801925][ T6600]  <TASK>
[  318.801936][ T6600]  dump_stack_lvl+0xcd/0x134
[  318.801977][ T6600]  should_fail.cold+0x5/0xa
[  318.832968][ T6600]  prepare_alloc_pages+0x17b/0x570
[  318.838163][ T6600]  __alloc_pages+0x12f/0x500
[  318.842736][ T6600]  ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0
[  318.849751][ T6600]  ? lock_downgrade+0x6e0/0x6e0
[  318.854981][ T6600]  ? down_write+0xde/0x150
[  318.859609][ T6600]  alloc_pages+0x1aa/0x310
[  318.864233][ T6600]  kvm_coalesced_mmio_init+0x18/0x110
[  318.869961][ T6600]  kvm_dev_ioctl+0x5b7/0x1c70
[  318.874879][ T6600]  ? kvm_stat_data_open+0x380/0x380
[  318.880269][ T6600]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  318.886708][ T6600]  ? kvm_stat_data_open+0x380/0x380
[  318.892193][ T6600]  __do_compat_sys_ioctl+0x1c7/0x290
[  318.897738][ T6600]  __do_fast_syscall_32+0x65/0xf0
[  318.902917][ T6600]  do_fast_syscall_32+0x2f/0x70
[  318.907810][ T6600]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  318.914210][ T6600] RIP: 0023:0xf7f6f549
[  318.918416][ T6600] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  318.938210][ T6600] RSP: 002b:00000000f7f6a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  318.946575][ T6600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  318.954504][ T6600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  318.962278][ T6600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.970194][ T6600] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  318.978058][ T6600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.985891][ T6600]  </TASK>
[  318.988935][ T6614] CPU: 3 PID: 6614 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0
[  318.998540][ T6614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014