0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4008800, 0x0, 0xffffffffffffff5f)
sendto$inet6(r0, 0x0, 0x4, 0x3f000000, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x79, 0x0, [0x27a, 0x35fd, 0x400000000000]})

17:24:52 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070")
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfffffffffffffd1f}}, 0xe8)
sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000002000), 0x0, 0x0)

[  332.909348] openvswitch: netlink: Flow set message rejected, Key attribute missing.
17:24:53 executing program 2:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000000680)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f00000005c0)='1\x94\xb5\xac\x80\xda\xf9\x8a*\xeb\x9cG\xbf\xe5AEk\x9c\xce \x0e\x8cnA\xc4QQ`\x92\x1f\xb1,\xd6M\xf50:\x94D\xcc\x15qV\xf0\x98]\x1f\x02`i\xcb\x05\xdf:1z\xdc\xdfE\xf8\x10)5\xa0\xa5\xfb{0#\x81\xff\xf5T\xa0\xfb\xad\xcb\xa1gaB\xce\xfb\x1b\xe8\xb8\xdb\xf3%\xe5\xd730Z\xd7\xa2z\xfbt\xe7\xe2~\xae\xb0z\xa1\xb8-/\x03\xd8\xbc\xe1\xdc\xfe8cG89ak\xc4\x0f\x82#\xe8p\x98\xda\xc6,')
chdir(&(0x7f0000000000)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080))
umount2(&(0x7f00000000c0)='./file0\x00', 0x8)
ftruncate(r0, 0x28007d)
sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe)

17:24:53 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
accept(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x48, &(0x7f0000000100)={0xfec0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffffffff000}}}, 0x90)

17:24:53 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)
r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1ff, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x100, 0x80000001}, 'port1\x00', 0xe8, 0x40026, 0x6, 0x9, 0x3ff, 0x5, 0x20, 0x0, 0x5, 0x7fff})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
getsockopt(r2, 0x8000, 0x7, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=0x25)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={r1, 0x0, 0x4, 0x111, 0x1f})

17:24:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'bridge0\x00'}}}}}, 0x34}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r0})
getsockopt$inet_tcp_int(r2, 0x6, 0x3c, &(0x7f0000000040), &(0x7f0000000080)=0x4)

[  333.679701] Started in network mode
[  333.684875] Own node identity aaaaaaaaaa0c, cluster identity 4711
[  333.692025] Enabled bearer <eth:bridge0>, priority 0
[  333.733697] Enabling of bearer <eth:bridge0> rejected, already enabled
17:24:53 executing program 2:
unshare(0x20400)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x6)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x80)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/4096)

17:24:54 executing program 0:
unshare(0x200)
r0 = syz_open_procfs(0x0, &(0x7f0000002300)='net/unix\x00')
readv(r0, 0x0, 0x0)

17:24:54 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xa, @pix_mp})

[  334.813055] 32-bit node address hash set to aaaaa600
17:24:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040), 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x9ed}, 0x4)

17:24:55 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)
r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1ff, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x100, 0x80000001}, 'port1\x00', 0xe8, 0x40026, 0x6, 0x9, 0x3ff, 0x5, 0x20, 0x0, 0x5, 0x7fff})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
getsockopt(r2, 0x8000, 0x7, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=0x25)

17:24:55 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x8000)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0)
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
sigaltstack(&(0x7f0000009000/0x2000)=nil, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

17:24:55 executing program 3:
chdir(&(0x7f00000001c0)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000004c0)=0xfd, 0x4)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x161)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x9fe7, 0x100000000, 0x2})
write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x0)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/237, 0xed}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f0000000540)=""/133, 0x85}], 0x4}}], 0x1, 0x100, 0x0)
sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0)
close(r0)

17:24:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0x5, 0x4)
bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80)
shutdown(r1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10)
recvmmsg(r1, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400})
r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xd71, 0x200)
ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0x7, 0xee95, [], &(0x7f0000000140)=0x800})

17:24:55 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "66dfb8bc696b20d436293008420e4a7f774d93aa"}, 0x15, 0x2)
fcntl$F_GET_RW_HINT(r0, 0x40b, 0xffffffffffffffff)

17:24:55 executing program 1:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = inotify_init()
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x6, "6968d1632df841f1933d554945d42038da7055363d5d2f72597fbee007e72fa4", 0x1, 0x1})
inotify_rm_watch(0xffffffffffffffff, 0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000100)
inotify_rm_watch(r0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x100, 0xc19a, 0x8, 0xc993, 0x2})

17:24:56 executing program 3:
futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x3000000)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
r2 = shmget$private(0x0, 0x3000, 0x7c000421, &(0x7f0000ffb000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/82)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xfda, 0x4, 0x8, 0xcf7, "79925b5936e61cc2ff3cf58c13d062fdd5ff64ae55dc717595db0b891dfec87e"})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)

17:24:56 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000280), 0x4)

17:24:56 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4)
r1 = socket$inet6(0xa, 0x3, 0x101)
close(r1)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100))
r3 = dup3(r1, r0, 0x80000)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @broadcast}, &(0x7f0000000080)=0xc)

17:24:56 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)

17:24:56 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x80000, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000502000000000000000000000000", @ANYRES32=r2, @ANYBLOB="0000c36824d9bb926d7700000000000008000a0010000000"], 0x28}}, 0x0)

17:24:56 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x3c57ec61, 0x12, 0x1})
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x1})

[  336.550468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
17:24:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)
r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1ff, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x100, 0x80000001}, 'port1\x00', 0xe8, 0x40026, 0x6, 0x9, 0x3ff, 0x5, 0x20, 0x0, 0x5, 0x7fff})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
getsockopt(r2, 0x8000, 0x7, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=0x25)

17:24:56 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000000), 0x800040000000e)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='cgroup.clone_children\x00')

17:24:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200003, 0x0)
bind$pptp(r1, &(0x7f0000000080), 0x1e)
ioctl$TIOCGSOFTCAR(r0, 0x80047456, &(0x7f0000000140))

[  336.687304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
17:24:56 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x50000, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x140000000, 0x81, 0x7efb5830})
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}, {0x8}}}, 0xb8}}, 0x0)

17:24:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair(0x0, 0x8000b, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x118010, r0, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x8080)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x1, 0xffff, 0x8}, 0xa)

17:24:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x10000)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000040)={{0x3, @name="0db05e3215de6f8bf594f4f85e4ab82d4ae32232bc36a2ce352918191e94d81c"}, "1f52f0954187727abc8e02a6ead1e859147ae4d5a90801401e931bd8470b9296", 0x1})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x77, 0x0, [0x40000000, 0x0, 0x40000001]})
getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000140), &(0x7f0000000180)=0x4)

17:24:57 executing program 2:
r0 = syz_open_dev$video(0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfe, 0x280)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000380)={0x0, 0x4004403})
r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000840)=r1)
pread64(r3, &(0x7f0000000300)=""/46, 0x2e, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x10000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000007c0))
flock(r2, 0xa)
mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000700)={@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0xe62d, @empty, 0x8}}}, {&(0x7f0000000680)=""/6, 0x6}, &(0x7f00000006c0), 0x60}, 0xa0)
clone(0x102000, &(0x7f00000003c0)="3dcb8b465cb39fafddad83b1580ad1930f20e40b395923df2860164e554ac078c2c6b06480e91dc83e2775f84126f7f4c7521b0e4b6441e32e4fc13aa875eae5b9a08e6c8d0066015d127b56a1cb6006a887d8b09f67dd2d60b369e6736de82f746726ca1dca3cb93b7f8b6916f24d3a6492139e3d76054832f69d3bd3a8f7e425823060d3b0817c650f414e798c8f43dcf2d1946138133d07a5daec360a45b93dedafe76cc5ffaf0aef8c818f9c46a9ae9a8db064d825be1ec3875910a93e892786d2090622d36eb5bb71ca360fad9e5c71eafb4daec0576930c42e55178bf8b388ecb3c5db47848ffc5def74", &(0x7f0000000140), &(0x7f0000000200), &(0x7f00000004c0)="c2abd81620850e06b94278435b3c7473d65146571845050c6decde4e8404d51c2ce66c9a003ef868a209631d35995325ddef695a25ae9c029dbd1ac8ab57e089bfaadd761de2964a84a89b13795487a2ff39a5d65890271380a184d5493cecace92a1f5ff1f6d131cfd69609983ee042afde782c179e4ad7fb5b1e7a28b6565f081ec567019289a8ae6c70c207aa9fc7f0127babe4c3806fd999f6e410b5ffcaf009727f78c609b89b7914bc0743a716758319f84cec11e1be12621b7bf67c9173e73d252c1a832857d259261211d911cc6af5980d0b9c12ad2dbd79")
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000008440000005c000000f6000000a18833119f5bc4ec9be77d00000000000000005920337efee9675b28754264c7305d5029c755d100000074735af85041c10900000000000000000000000000000000"], 0x0, 0x66}, 0x20)
syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x6, 0x40)
getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000005c0)=""/146, &(0x7f0000000080)=0xfffffffffffffcd5)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000800))
accept$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e)
socket$pppoe(0x18, 0x1, 0x0)

[  337.136731] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'.
[  337.225349] hrtimer: interrupt took 35534 ns
17:24:57 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa, 0x84000)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x3f, 0x37, 0x1, {0x1, 0x8, 0x6fa7eda4, r1, 0x21, 'systembdev]trusted^:trustedwlan1&'}}, 0x3f)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x4, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x3d1, &(0x7f000000cf3d)=""/195}, 0x48)

17:24:57 executing program 3:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x100, 0x0)
name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0xe6, 0x2, "04716d61ae0688acd7b79485fe03ff49b87806d2582be6ebde01ec56726ad95204dd75965439c686afaa42335921aebb8a3c5a5e48068913e7d4e4bec31aecbee6d938a4b993bc78681e330fee3e4dea5fcf6f6f894b6c8bbe93747250c43e3af88b0b4a7cf8178304c5adfc74159fd1aba683a89755afb7c2826d37f700fef40f1d895ca4608aba36df1c5e997822886aa8c1e6c47529a9a9491d2b18f9a834c53ecec3592853562aa6ae5fcdf884d61a9cd7ddb4e862e6dd9a36b16a1171ec84b37cff134401145fc29d9be05b263dee9785daf8cbbff72bc58cd339d8"}, &(0x7f00000001c0), 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, r0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000200))
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000300)=""/162)
exit(0x8)

17:24:57 executing program 1:
r0 = gettid()
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r1+30000000}, 0xfffffffffffffffd)
timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000))
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/48)
timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x40000000016)

17:24:57 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa, 0x84000)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x3f, 0x37, 0x1, {0x1, 0x8, 0x6fa7eda4, r1, 0x21, 'systembdev]trusted^:trustedwlan1&'}}, 0x3f)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x4, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x3d1, &(0x7f000000cf3d)=""/195}, 0x48)

17:24:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)
r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1ff, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x100, 0x80000001}, 'port1\x00', 0xe8, 0x40026, 0x6, 0x9, 0x3ff, 0x5, 0x20, 0x0, 0x5, 0x7fff})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)

17:24:57 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000000000000000cd73aa860725304fd9c0de87da5f0155ee1e072fa90298188fe1ae9fce01ea5d3e97a47cbf66609fefbd58da84c7cfde560535f930ba244d0a6fd9ffffffff000000004b78f15103063ec75f35adfdcda3e33287fcf80dba22e5473115b89e95927e149cd0765fb86a4d75e41f7364af2240e7129257c6dfaa026c0a8ab61a64beb275e9db9eb314ccd58a033519653b2a07a4ab9fe82b2caee2a719eaafe1c1c4f805e816350cca46465abd149f0f2b56f0e1c7e0439d36521c261531c448819f55"], 0x10}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x80000)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4)

17:24:58 executing program 0:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x2000003f, 0x20000001)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3, 0x18, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={<r1=>0x0, 0x7, 0x9, 0x10000, 0x2b51, 0x8}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @local}}, 0xc9, 0x100, 0x655, 0xffff, 0x5}, &(0x7f0000000100)=0x98)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x1})
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00'], 0x0)

17:24:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10}]}, 0x30}}, 0x0)
r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x61, 0x204c0)
ioctl$KDSETLED(r2, 0x4b32, 0x400)

17:24:58 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x9f0004, 0x7fffffff, 0x9, [], &(0x7f0000000040)={0x9b0bff, 0x9, [], @string=&(0x7f0000000000)=0x7fffffff}})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x1463b5bb, 0x2000000000001000, 0x5, 0x1ff})
ioctl(r0, 0xc2604110, &(0x7f00000000c0)="2ee0230f5fdd33c758a632b870ce4dc1d7d74236780046eb601a42b04e404a5dcd12f24dd20a25c485b35cbfefb03d08b6e67d71fadb50f78dbbd5c822e0ca956f69a6beeb")

[  338.450283] netlink: 'syz-executor.0': attribute type 16 has an invalid length.
[  338.468386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
17:24:58 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f00000002c0)=""/130, 0x82}], 0x6)

17:24:58 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x5, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r3 = dup(r2)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x1, 0x468edd9b, 0x5, 0x6}, 'syz1\x00', 0x13})
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x14)
ioctl$UI_DEV_SETUP(r2, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
write$uinput_user_dev(r3, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1bc5]}, 0x45c)
getsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482)

[  338.850129] input: syz1 as /devices/virtual/input/input11
17:24:59 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:24:59 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)
r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1ff, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x100, 0x80000001}, 'port1\x00', 0xe8, 0x40026, 0x6, 0x9, 0x3ff, 0x5, 0x20, 0x0, 0x5, 0x7fff})

17:24:59 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0)
r3 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x801, 0x10)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
getdents64(r1, &(0x7f0000000040)=""/41, 0x29)
getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5)

17:24:59 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00')
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x2b0, r1, 0x18, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44737ab2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5d3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5e6d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xaabe}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff090}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc43}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e8}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000001c0)={0xe7, 0x7})
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
read(r0, &(0x7f0000000000)=""/100, 0x64)
sched_getparam(0x0, &(0x7f0000000080))
writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)

17:24:59 executing program 3:
unshare(0x4000400)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10000000)
inotify_rm_watch(r0, r1)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0)
write$P9_RWALK(r2, &(0x7f00000000c0)={0x16, 0x6f, 0x1, {0x1, [{0x20, 0x4, 0x4}]}}, 0x16)
sendto$rxrpc(r2, &(0x7f0000000140)="d40c11e68e15fb9ce63f5bdcc46d5c7c882630a9a48bfb9cd5bff8574cad882ba1462299295db37cf6a520fc3a6144ec6e50ac3b4497095c798535e46eb9ddc804e06d93a1d6907be11d6d9919b4dff25b56158cbe77ba1253ac4a7c4110bb5f3a5e0e1867a23977a1d295ddb65f9e52fd93dabb72bf7f3d120dadd6aaedc0631980b234d5ffab2faabcc07668d16ca213acbaaa74c511890f0ff9", 0x9b, 0x880, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e21, 0x2, @rand_addr="174c7b1c24ebc71e86d32466bc337c57", 0x5}}}, 0x3a)
openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x800, 0x0)

17:24:59 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)={0x0, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x9, 0x18}, 0xc)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0xfffffffffffffff9, <r4=>0x0, 0x10000, 0x80000000})
ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x200, r4})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000240)=0x8000, 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={<r5=>0x0}, &(0x7f00000002c0)=0xc)
process_vm_writev(r5, &(0x7f0000000540)=[{&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/59, 0x3b}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000580)=""/57, 0x39}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/89, 0x59}], 0x3, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000006c0)={0x2, 'bridge_slave_1\x00', 0x4}, 0x18)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000700))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000740)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0]}, &(0x7f0000000780)=0x1c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x5}, &(0x7f0000000800)=0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000840)='/proc/self/net/pfkey\x00', 0x204000, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000880)=""/195, &(0x7f0000000980)=0xc3)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r8, 0x100, 0x70bd26, 0x8, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x5, 0x1, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4048881)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000b00)={0x0, @bt={0xffffffffffffffc0, 0x0, 0x1, 0x2, 0x1e, 0x1, 0x6, 0xa7, 0x6, 0x10001, 0x5, 0x0, 0x101, 0x7f60, 0x2, 0x24}})
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/sequencer\x00', 0x40, 0x0)
clock_gettime(0x0, &(0x7f0000000c00)={<r10=>0x0, <r11=>0x0})
write$input_event(r7, &(0x7f0000000c40)={{r10, r11/1000+30000}, 0x17, 0x7bf7, 0x7}, 0x18)
splice(r3, &(0x7f0000000c80), r1, &(0x7f0000000cc0), 0x7ff, 0x2)
ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000d00)={'vcan0\x00', 0x52a9b8fc})
ioctl$SG_EMULATED_HOST(r7, 0x2203, &(0x7f0000000d40))
ioctl$TIOCNXCL(r7, 0x540d)
clock_gettime(0x3, &(0x7f0000000d80))
ioctl$NBD_DISCONNECT(r0, 0xab08)

17:24:59 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x100)
r0 = creat(0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)='s\\z8\x00\x80\x01\x01\x00\x00\x00\x00\x00\x00\x94\xe0$qq\x84\x10\xb1\xc7\xa0&\x9f\x04\x8e@\xf8\r\xcd\x1cF\xc4(\x87\xcf\x14\xf6\xd5\xbb\xa8\xa4-\xd5\x9e`\xe3\xa7\x88\xe6\xe0AsO\xeb\x12\xd7\xdf|I\x17\xd1\x04\xde\xb2\x9f#\x9b\x8c\x9c\xbd2\xb5\x13\x02\x82\t\xec\xaf\xe8\xbc<\xb6;\xae\x84\xe0\xd2\xf68jz\xbb\xe4\\<7\x17n-\x7f2\x06a\xcc\xa1y/\xff\xba\xc3L\xd9\xe1\xddv;\xc5\xcdD`!{{\xbf\xb5\x84\xd1\x84\xfd~\xab\x0fk\xbe\xef2sE\xe0\x02ek\xfe\xbd\xdc\xe4', 0x0)
tkill(0x0, 0x0)
accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x0, 0x4, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x54, 0x9, 0x0, 0x0, 0x10000000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe089, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0xc}, 0x2020, 0x1ff, 0x3, 0xf, 0x0, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000021c, 0x0)

17:24:59 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x8, 0x0)

17:24:59 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff]}, 0x45c)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x10000000000000)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x9)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xce991b369655c61c, &(0x7f00000001c0), 0x0)
bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

[  339.926106] kauditd_printk_skb: 3 callbacks suppressed
[  339.926140] audit: type=1326 audit(1551720299.987:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11756 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
17:25:00 executing program 2:
clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000006b00)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
exit_group(0x0)

17:25:00 executing program 0:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000440)="62f56b8de134341d5bcfad84a07869dd", 0x10}], 0x1, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
splice(r0, 0x0, r3, 0x0, 0x1ea71, 0x0)

17:25:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7})

17:25:00 executing program 0:
inotify_init()
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)

17:25:00 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)
syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1ff, 0x200000)

17:25:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x7, &(0x7f0000000040)={0x0, <r2=>0x0})
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)

[  340.690197] audit: type=1326 audit(1551720300.747:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11756 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
17:25:00 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x80000001, 0x12)

[  340.902694] IPVS: ftp: loaded support on port[0] = 21
17:25:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x3, 0x0, [{0x1, 0x80, 0x0, 0x0, 0x0, 0xb0e8, 0x4b}, {0x80000000, 0x4, 0x1, 0x9135, 0xffff, 0x800, 0x1}, {}]})

[  341.339258] chnl_net:caif_netlink_parms(): no params data found
[  341.431512] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.438180] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.446837] device bridge_slave_0 entered promiscuous mode
[  341.463090] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.469651] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.481248] device bridge_slave_1 entered promiscuous mode
[  341.522573] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  341.536517] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  341.587376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  341.596615] team0: Port device team_slave_0 added
[  341.603820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  341.612872] team0: Port device team_slave_1 added
[  341.619174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  341.627900] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  341.658054] device hsr_slave_0 entered promiscuous mode
[  341.664984] device hsr_slave_1 entered promiscuous mode
[  341.671835] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  341.679188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  341.701789] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.708365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.715570] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.722115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.783748] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  341.789887] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.800713] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  341.813184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  341.823623] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.831028] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.840543] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  341.859026] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  341.865334] 8021q: adding VLAN 0 to HW filter on device team0
[  341.878964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  341.887428] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.894029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.912986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  341.921266] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.927850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.951285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  341.961211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  341.986856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  341.996232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  342.005919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  342.019773] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  342.026482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.050111] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  342.067599] 8021q: adding VLAN 0 to HW filter on device batadv0
17:25:02 executing program 5:
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80003, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)
io_destroy(0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000300))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)

17:25:02 executing program 0:
clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xd)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xf8})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)

17:25:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)

17:25:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x3, 0x0, [{0x1, 0x80, 0x0, 0x0, 0x0, 0xb0e8, 0x4b}, {0x80000000, 0x4, 0x1, 0x9135, 0xffff, 0x800, 0x1}, {}]})

17:25:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x888)

17:25:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000380))

17:25:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f00000000c0))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  342.279725] ptrace attach of "/root/syz-executor.0"[11824] was attempted by "/root/syz-executor.0"[11825]
17:25:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x3, 0x0, [{0x1, 0x80, 0x0, 0x0, 0x0, 0xb0e8, 0x4b}, {0x80000000, 0x4, 0x1, 0x9135, 0xffff, 0x800, 0x1}, {}]})

17:25:02 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02"]})

17:25:02 executing program 3:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
msync(&(0x7f0000943000/0x2000)=nil, 0x2000, 0x5)

17:25:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0)

17:25:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa97, 0x4, {0x200000000002, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}}})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2)
dup3(r0, r1, 0x0)

17:25:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)=0x1)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0x23}], 0x1)
write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000075b60b034400000000000000000000000000000000"], 0x2a)

17:25:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x0, @local}, 0x10)

17:25:03 executing program 3:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200))
ppoll(&(0x7f0000000180)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x2d6)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r1)
add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, 0x0)

17:25:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:03 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x0, 0x5, 0x10000003ff})

17:25:03 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)
write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffece)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
r3 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000013)

17:25:03 executing program 0:
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe, 0x0, 0x1000000000000]})
close(r0)

17:25:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x11, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440000000000e630c400000000050"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})

17:25:03 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0), 0xc)

[  343.717947] binder: 11892:11894 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000050 != 0000000000000000
[  343.789088] binder: BINDER_SET_CONTEXT_MGR already set
[  343.795440] binder: 11892:11894 ioctl 40046207 0 returned -16
17:25:03 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
write(r0, &(0x7f0000000600)="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", 0xa00)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1ffda)
shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0)
clock_gettime(0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100))
getsockname$unix(r0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x9000)=nil, 0x0)
shmdt(0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)

17:25:04 executing program 0:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f000027b000/0x3000)=nil)
io_setup(0x0, 0x0)

17:25:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfbfffffffffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000040), 0x70, 0x0)

17:25:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100))
ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040))

17:25:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x4, 0x0, [{0xd, 0x800, 0x7, 0x10000, 0x0, 0x8, 0x6}, {0x1, 0x80, 0x0, 0x101, 0x4, 0xb0e8, 0x4b}, {0x80000000, 0x4, 0x1, 0x9135, 0xffff, 0x800, 0x1}, {}]})

17:25:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:04 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0)

17:25:04 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)

17:25:04 executing program 5:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r0, 0x40085511, 0x0)

17:25:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp], 0x8cd4d)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0), 0x4)

17:25:05 executing program 4:
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:06 executing program 1:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000aa4000/0x1000)=nil)

17:25:06 executing program 0:
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x3f553e5)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "d5d1eb27cc4b67a1361306064f30db69d0815036"}, 0x15, 0x3)

17:25:06 executing program 2:
clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x2e)
tkill(r0, 0x16)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

17:25:06 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/174, 0xae}], 0x2, 0x0)

17:25:06 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x2000000000a, 0x1, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000033c0)={0x1, &(0x7f0000003400)=[{0x16}]}, 0x10)
dup3(r1, r0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

[  346.164456] protocol 88fb is buggy, dev hsr_slave_0
[  346.170356] protocol 88fb is buggy, dev hsr_slave_1
[  346.171219] ptrace attach of "/root/syz-executor.2"[11978] was attempted by "/root/syz-executor.2"[11979]
17:25:06 executing program 4:
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfbfffffffffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000040), 0x52, 0x0)

17:25:06 executing program 3:
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)

17:25:06 executing program 5:
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "a00c50", 0x30, 0x3c, 0x0, @ipv4={[], [], @local}, @local, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0cf805", 0x0, 0x0, 0x0, @ipv4={[], [], @dev}, @mcast2}}}}}}}, 0x0)

17:25:06 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_buf(r0, 0x29, 0xb, &(0x7f0000c86000), &(0x7f0000000000)=0x284ea92c5e2cee3a)

17:25:06 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xc9, 0x20000)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0)
syz_open_pts(r1, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
exit(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="daf144000000"], 0x0)

17:25:06 executing program 3:
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80003, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)
io_destroy(0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000300))

17:25:07 executing program 5:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000080), 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000074000/0x1000)=nil)

17:25:07 executing program 0:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

17:25:09 executing program 2:
r0 = socket$inet(0x10, 0x10000000003, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000040a07121dfffd946fa2830020200a00030001001e1d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

17:25:09 executing program 4:
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
syz_genetlink_get_family_id$tipc(0xffffffffffffffff)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40200, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x10001, "7da7aee11b55d6d508c1054e35e0dda7477636c5a36dbe3e4d2ddcc9d96d5687", 0x0, 0x1})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

17:25:09 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1)

17:25:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x9})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040))

17:25:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
timer_delete(0x0)
futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)

[  349.356924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
17:25:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="f3dd080f3566b8010000000f01d966b8ffc000000f23d80f21f86635c00000300f23f8ba210066b81f00000066ef660f55630cea0068ac00def466b9800000c00f326635000400000f3083760039", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:09 executing program 1:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100100f80ecdb4cb9047ec8650407000000000000fb", 0x1c}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="006386dd21"], 0x5)

17:25:09 executing program 2:
fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x7c3a)
clone(0x200085fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

17:25:09 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00\xdc\x0e\x9d\x12L\xc4\xf3B[:,\xeb\x93\xdb\x15\xd2y\x04\xcd$\xae\xa8`\xa9\xf0\xeb\xa8CvA\xfcR\xf3\x04\xf1\xa8\x90\xe5OQ\xdc\xff\x83-\xb0Y\x80h\xaf\x8b~}\xa8\x1d\x95^e#X\x85\x1a\xbe\xb5\xd7g\x06\x87.\xe8\x02)\x13\x89\x99`\xb21\xcfIq\x83y0{\xa3\xd6h\x90\xcc\xf6\xf4\xad\x1a\x7f\x8a\xf5\x98\xc7\x84\xb5<h\x05\xfc\xc7\x1f\x94\xe4\x9a\x17\xe2\xad\x02\xe68%\xa2\t\x87\x15t\x06\x00qf\xa5\xb7%\xf8\xa0\xbc\x81t\xb6Yn1K\xdc\x9f\xfd\xf0\xbbrM\a\xc6\xae`', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x9b)
socket$kcm(0xa, 0x0, 0x11)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

17:25:09 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000002a80)=""/246)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280))
close(r0)

[  349.803546] device nr0
 entered promiscuous mode
[  349.878544] *** Guest State ***
[  349.882249] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  349.891139] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  349.900164] CR3 = 0x0000000000000000
[  349.903978] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  349.910001] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  349.916106] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  349.922943] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  349.930981] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  349.939104] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  349.947217] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  349.955337] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  349.963454] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  349.971479] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  349.979611] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  349.987724] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  349.995908] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  350.004030] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  350.010495] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  350.018147] Interruptibility = 00000000  ActivityState = 00000000
[  350.025056] *** Host State ***
[  350.028307] RIP = 0xffffffff812fec40  RSP = 0xffff8880291ff3b0
[  350.034529] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  350.041018] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  350.049025] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  350.055058] CR0=0000000080050033 CR3=000000009efc0000 CR4=00000000001426f0
[  350.062248] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  350.068965] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  350.075226] *** Control State ***
[  350.078730] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  350.085568] EntryControls=0000d1ff ExitControls=002fefff
[  350.092593] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  350.099580] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  350.106414] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  350.113735]         reason=80000021 qualification=0000000000000000
[  350.120092] IDTVectoring: info=00000000 errcode=00000000
[  350.127914] TSC Offset = 0xffffff40922be230
[  350.132580] TPR Threshold = 0x00
[  350.135985] EPT pointer = 0x000000008db9101e
17:25:10 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0)

17:25:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sysfs$3(0x3)

17:25:10 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa97, 0x4, {0x200000000002, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2)

17:25:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
close(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/11, 0xb)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140))
clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)

17:25:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x800000000003, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0xefb471a30602aaed, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:11 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
poll(&(0x7f0000000040)=[{r0, 0x4ac6ca8140b6ceb}, {r0}, {r1}], 0x3, 0x0)

17:25:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)

17:25:11 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

[  351.296286] *** Guest State ***
[  351.299666] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  351.308876] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  351.317848] CR3 = 0x0000000000000000
[  351.321663] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  351.327683] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  351.333776] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  351.340570] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  351.348811] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  351.356947] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  351.365080] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  351.373215] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  351.381268] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  351.389415] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  351.397542] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  351.405664] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  351.413791] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  351.422031] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  351.428525] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  351.436153] Interruptibility = 00000000  ActivityState = 00000000
[  351.442514] *** Host State ***
17:25:11 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="01003a1e2410"})
getgroups(0x0, 0x0)

[  351.445764] RIP = 0xffffffff812fec40  RSP = 0xffff888031a3f3b0
[  351.451897] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  351.458414] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  351.466336] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  351.472353] CR0=0000000080050033 CR3=000000003775b000 CR4=00000000001426e0
[  351.479428] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  351.486248] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  351.492414] *** Control State ***
[  351.495922] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  351.502751] EntryControls=0000d1ff ExitControls=002fefff
[  351.508254] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  351.515346] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  351.522131] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  351.528769]         reason=80000021 qualification=0000000000000000
[  351.535276] IDTVectoring: info=00000000 errcode=00000000
[  351.540782] TSC Offset = 0xffffff3fd0b0e8d8
17:25:11 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x8b, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x7db445063cc182f7)
set_tid_address(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x200000000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x400000)
getitimer(0x0, 0x0)
r4 = socket(0xb, 0x5, 0x5)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200)={0x6, 0x5}, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0)
bind$inet6(r4, 0x0, 0x0)

17:25:11 executing program 3:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  351.545373] TPR Threshold = 0x00
[  351.548781] EPT pointer = 0x000000009bb0a01e
17:25:11 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1, 0x0, 0x0, 0xc}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:25:11 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa8137ffff00c5f800ffffffff5d9caaa6b1a30000c1d899d2d8e5bf1829ce0006ca68879a08ea515f715e0a46d479c83f7b43e328eac3ac7f7e60c7e13e4e4121323f015fd669278f06dd13c572493acc733bcd4912b8b37f817805056cd6a3c6673a20c3bf67959dbf1cd06a204c949898a5f71b537e3fbcf1179a8f10aae99ede1fd46152d76d36b6dcb5433d672bb4c083d596fa573d6a8dbdea3493013480d2ab8478c5765534a765604a2ebc1eaccd0e36146bd53188b49581cf496d0bba978cb666d469ac"], 0x0)

17:25:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  352.109466] *** Guest State ***
[  352.113139] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  352.122181] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  352.131397] CR3 = 0x0000000000000000
[  352.135301] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  352.141318] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  352.147444] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  352.154487] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  352.162604] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.170640] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.178808] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.186962] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.195128] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
17:25:12 executing program 1:

[  352.203278] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  352.211415] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
17:25:12 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:12 executing program 5:

17:25:12 executing program 1:

[  352.211447] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  352.211487] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  352.211625] EFER =     0x0000000000000000  PAT = 0x0007040600070406
17:25:12 executing program 5:

[  352.211651] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  352.211683] Interruptibility = 00000000  ActivityState = 00000000
[  352.211694] *** Host State ***
[  352.211722] RIP = 0xffffffff812fec40  RSP = 0xffff888105e2f3b0
[  352.211771] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
17:25:12 executing program 1:

[  352.211805] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  352.211833] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  352.211863] CR0=0000000080050033 CR3=000000003775b000 CR4=00000000001426f0
[  352.211897] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
17:25:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  352.211923] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  352.211935] *** Control State ***
[  352.211960] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  352.211980] EntryControls=0000d1ff ExitControls=002fefff
[  352.212010] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  352.212034] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  352.212057] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  352.212077]         reason=80000021 qualification=0000000000000000
[  352.212096] IDTVectoring: info=00000000 errcode=00000000
[  352.212113] TSC Offset = 0xffffff3f5e8151a2
[  352.212127] TPR Threshold = 0x00
[  352.212145] EPT pointer = 0x000000009fa6001e
[  352.933830] *** Guest State ***
[  352.933866] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  352.933897] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  352.933912] CR3 = 0x0000000000000000
[  352.933932] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  352.933954] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  352.933984] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  352.934017] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  352.934057] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.934094] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.934130] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.934176] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.934214] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  352.934241] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  352.934282] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  352.934311] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  352.934354] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  352.934378] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  352.934405] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  352.934429] Interruptibility = 00000000  ActivityState = 00000000
[  352.934440] *** Host State ***
17:25:13 executing program 2:

[  352.934469] RIP = 0xffffffff812fec40  RSP = 0xffff888031bdf3b0
[  352.934518] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  352.934552] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  352.934581] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  352.934621] CR0=0000000080050033 CR3=000000002c015000 CR4=00000000001426e0
[  352.934720] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  352.934747] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  352.934760] *** Control State ***
[  352.934784] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  352.934803] EntryControls=0000d1ff ExitControls=002fefff
[  352.934832] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  352.934855] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  352.934878] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  352.934899]         reason=80000021 qualification=0000000000000000
[  352.934918] IDTVectoring: info=00000000 errcode=00000000
[  352.934934] TSC Offset = 0xffffff3eed571b94
[  352.934949] TPR Threshold = 0x00
[  352.934967] EPT pointer = 0x000000002a23d01e
17:25:13 executing program 1:

17:25:13 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000b0000007d000100000000000f000000000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f00000000c0)=""/195}, 0x48)

17:25:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:13 executing program 3:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:13 executing program 2:

17:25:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:13 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:13 executing program 5:

17:25:13 executing program 2:

17:25:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:13 executing program 5:

17:25:14 executing program 2:

[  354.120585] *** Guest State ***
[  354.125355] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  354.134819] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  354.143904] CR3 = 0x0000000000000000
[  354.147687] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  354.153848] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  354.159989] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
17:25:14 executing program 3:

[  354.166835] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  354.174990] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  354.183132] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  354.191876] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  354.199926] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  354.208075] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  354.216201] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  354.224387] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  354.232532] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  354.240573] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  354.248716] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  354.255269] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  354.262859] Interruptibility = 00000000  ActivityState = 00000000
[  354.269124] *** Host State ***
[  354.272440] RIP = 0xffffffff812fec40  RSP = 0xffff88802dc3f3b0
[  354.278477] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  354.285060] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  354.292990] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  354.298934] CR0=0000000080050033 CR3=00000000340a6000 CR4=00000000001426f0
[  354.306112] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  354.312920] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  354.319017] *** Control State ***
[  354.322620] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  354.329355] EntryControls=0000d1ff ExitControls=002fefff
[  354.334973] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  354.342023] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  354.348742] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  354.355548]         reason=80000021 qualification=0000000000000000
[  354.362013] IDTVectoring: info=00000000 errcode=00000000
[  354.367507] TSC Offset = 0xffffff3e4ba16992
17:25:14 executing program 2:

[  354.372001] TPR Threshold = 0x00
[  354.375417] EPT pointer = 0x000000002c07f01e
17:25:14 executing program 5:

17:25:14 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:14 executing program 3:

17:25:14 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:14 executing program 2:

17:25:14 executing program 5:

17:25:14 executing program 2:

17:25:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:15 executing program 3:

17:25:15 executing program 5:

17:25:15 executing program 2:

17:25:15 executing program 3:

17:25:15 executing program 5:

17:25:15 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:15 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:15 executing program 2:

17:25:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:15 executing program 5:

17:25:15 executing program 3:

[  355.772114] *** Guest State ***
[  355.775570] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  355.784854] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  355.793833] CR3 = 0x0000000000000000
[  355.797676] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  355.803823] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  355.809851] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
17:25:15 executing program 2:

[  355.816718] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  355.824950] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  355.833093] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  355.841124] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  355.849272] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  355.857398] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  355.865521] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  355.873667] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  355.881851] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  355.889885] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  355.898066] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  355.904612] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  355.912268] Interruptibility = 00000000  ActivityState = 00000000
[  355.918530] *** Host State ***
17:25:16 executing program 5:

[  355.921911] RIP = 0xffffffff812fec40  RSP = 0xffff88802c7bf3b0
[  355.927948] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  355.934556] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  355.942485] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  355.948428] CR0=0000000080050033 CR3=00000000959ac000 CR4=00000000001426f0
[  355.955639] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  355.962483] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  355.968570] *** Control State ***
[  355.972193] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  355.978912] EntryControls=0000d1ff ExitControls=002fefff
[  355.984580] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  355.991641] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  355.998393] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  356.005867]         reason=80000021 qualification=0000000000000000
[  356.012308] IDTVectoring: info=00000000 errcode=00000000
[  356.017794] TSC Offset = 0xffffff3d6bbe382b
17:25:16 executing program 3:

[  356.022580] TPR Threshold = 0x00
[  356.025986] EPT pointer = 0x000000009f36101e
17:25:16 executing program 2:

17:25:16 executing program 2:

17:25:16 executing program 5:

17:25:16 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:16 executing program 3:

17:25:16 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)

17:25:16 executing program 2:

17:25:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:16 executing program 5:

17:25:16 executing program 3:

17:25:16 executing program 5:

[  356.876217] *** Guest State ***
[  356.879691] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  356.890970] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  356.900006] CR3 = 0x0000000000000000
[  356.903826] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  356.909850] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  356.916012] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  356.922922] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  356.930967] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  356.939172] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  356.947308] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  356.955481] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  356.963615] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  356.971806] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  356.979860] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  356.988053] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  356.996204] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  357.004395] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  357.010862] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  357.018539] Interruptibility = 00000000  ActivityState = 00000000
17:25:17 executing program 5:

17:25:17 executing program 2:

[  357.025221] *** Host State ***
[  357.028466] RIP = 0xffffffff812fec40  RSP = 0xffff88807cb1f3b0
[  357.034697] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  357.041167] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  357.049215] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  357.055265] CR0=0000000080050033 CR3=0000000096ec1000 CR4=00000000001426f0
[  357.062485] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  357.069226] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
17:25:17 executing program 3:

[  357.075472] *** Control State ***
[  357.078973] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  357.085833] EntryControls=0000d1ff ExitControls=002fefff
[  357.092016] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  357.099012] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  357.105931] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  357.112672]         reason=80000021 qualification=0000000000000000
[  357.119037] IDTVectoring: info=00000000 errcode=00000000
[  357.124748] TSC Offset = 0xffffff3cd3cb34a0
[  357.129119] TPR Threshold = 0x00
[  357.132641] EPT pointer = 0x000000008f3fb01e
17:25:17 executing program 5:

17:25:17 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:17 executing program 3:

17:25:17 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)

17:25:17 executing program 2:

17:25:17 executing program 5:

17:25:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:17 executing program 5:

17:25:17 executing program 2:

17:25:17 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x8004)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
clock_gettime(0x4, &(0x7f00000001c0)={0x0, <r5=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080))
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8)
msgget$private(0x0, 0x80)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x1d, r6}, 0x10, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="030001800000000002000020200100002c08000000a32e19a1ec05eafdaf4a965a63cb2f3bf16bc527c1d10b0207848fdd73bcc1b3b346617f9aa16b45361df6facb05000000d094a2b43d6ac3eaa491e3aba87e0a90eb5c4d4b6e13fa2eb159634a4951fce0f00295c86f4a000000"], 0x1}}, 0x40000)

17:25:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:17 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)

17:25:18 executing program 2:

17:25:18 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:18 executing program 5:

17:25:18 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:18 executing program 2:

17:25:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:18 executing program 5:

17:25:18 executing program 2:

17:25:18 executing program 5:

17:25:19 executing program 3:

17:25:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:19 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:19 executing program 2:

17:25:19 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:19 executing program 5:

17:25:19 executing program 2:

17:25:19 executing program 3:

17:25:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:19 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  359.727730] *** Guest State ***
[  359.731243] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  359.740367] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  359.749369] CR3 = 0x0000000000000000
[  359.753266] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  359.759304] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  359.765566] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  359.772458] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  359.780581] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  359.788821] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  359.796976] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  359.805184] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  359.813377] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  359.821413] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  359.829715] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  359.837991] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  359.846458] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  359.854719] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  359.861182] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  359.868822] Interruptibility = 00000000  ActivityState = 00000000
[  359.875193] *** Host State ***
[  359.878436] RIP = 0xffffffff812fec40  RSP = 0xffff88808e36f3b0
[  359.884620] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  359.891096] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  359.899103] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  359.905128] CR0=0000000080050033 CR3=000000008d868000 CR4=00000000001426f0
[  359.912327] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  359.919046] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  359.925332] *** Control State ***
[  359.928838] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  359.935802] EntryControls=0000d1ff ExitControls=002fefff
[  359.941311] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  359.948444] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  359.955266] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  359.962031]         reason=80000021 qualification=0000000000000000
[  359.968395] IDTVectoring: info=00000000 errcode=00000000
[  359.974109] TSC Offset = 0xffffff3b4a568d2e
17:25:20 executing program 3:

17:25:20 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:20 executing program 5:

17:25:20 executing program 2:

[  359.978472] TPR Threshold = 0x00
[  359.982021] EPT pointer = 0x0000000096fb301e
17:25:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:25:20 executing program 5:

17:25:20 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:20 executing program 3:

17:25:20 executing program 2:

17:25:20 executing program 5:

17:25:20 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:25:21 executing program 5:

17:25:21 executing program 3:

17:25:21 executing program 2:

17:25:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:25:21 executing program 3:

17:25:21 executing program 2:

17:25:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:21 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:21 executing program 3:

17:25:21 executing program 5:

17:25:21 executing program 2:

17:25:22 executing program 3:

17:25:22 executing program 5:

17:25:22 executing program 2:

17:25:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:22 executing program 5:
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x2000000000079})
r0 = memfd_create(&(0x7f0000001dc0)='keyringeth1posix_acl_access*cgroup\x00', 0x0)
mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
name_to_handle_at(r0, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000000)=ANY=[], &(0x7f0000001ffc), 0x1400)

17:25:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="0c5bee526b", 0x5}], 0x1}, 0x0)

17:25:22 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:22 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:22 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000)

17:25:22 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
getpid()
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:25:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:22 executing program 3:

17:25:23 executing program 2:

17:25:23 executing program 3:
set_mempolicy(0x20000004003, &(0x7f0000000000)=0x10000000000008f, 0x41)
clone(0x3c0900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

17:25:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:23 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:23 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2})

17:25:23 executing program 3:
set_mempolicy(0x20000004003, &(0x7f0000000000)=0x10000000000008f, 0x41)
clone(0x3c0900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  363.321691] *** Guest State ***
[  363.325301] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  363.325336] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  363.325349] CR3 = 0x0000000000000000
[  363.325369] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  363.325392] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  363.325423] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  363.325459] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  363.325501] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  363.325540] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  363.325577] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  363.325615] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  363.325668] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  363.325699] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  363.325739] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  363.325770] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  363.325810] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  363.325835] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  363.325861] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  363.325885] Interruptibility = 00000000  ActivityState = 00000000
[  363.325896] *** Host State ***
[  363.325925] RIP = 0xffffffff812fec40  RSP = 0xffff88808e69f3b0
[  363.325975] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  363.495370] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  363.503358] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  363.509308] CR0=0000000080050033 CR3=000000009d6a4000 CR4=00000000001426e0
[  363.516521] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  363.523403] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  363.529510] *** Control State ***
[  363.533175] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  363.539894] EntryControls=0000d1ff ExitControls=002fefff
[  363.545563] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  363.552634] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  363.559366] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  363.566146]         reason=80000021 qualification=0000000000000000
[  363.572618] IDTVectoring: info=00000000 errcode=00000000
[  363.578125] TSC Offset = 0xffffff395e9bc0c4
[  363.582624] TPR Threshold = 0x00
[  363.586048] EPT pointer = 0x00000000900e001e
17:25:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:23 executing program 3:
syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x200, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00')
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
dup2(r0, r1)
execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0)
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

17:25:23 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffff9c, 0x0, 0xb1000400)
dup3(r0, r1, 0x0)
io_setup(0x0, 0x0)

17:25:24 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
mlockall(0x7)
lstat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x400000000000}, {0x0, 0x100}], r0}, 0x18, 0x2)
syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x4, 0x0)
ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000480))
munlockall()
socket$nl_netfilter(0x10, 0x3, 0xc)

17:25:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000c0000000000000008000100736671004800020000000000400000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000059f37f822369f0b628ad8d765f1f62be714fd7d710abbc04365b05a536da93a49bbe64a51729d302be49916179b653a558ae6ef058be722cda105110eae6169d488283"], 0x1}}, 0x0)

[  364.160979] *** Guest State ***
[  364.164664] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  364.173727] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  364.182759] CR3 = 0x0000000000000000
[  364.186513] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  364.192588] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  364.198722] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  364.205634] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  364.213775] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  364.221881] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  364.229913] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  364.238020] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  364.246122] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  364.254219] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  364.262416] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  364.270476] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  364.278614] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  364.286741] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  364.293256] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  364.300753] Interruptibility = 00000000  ActivityState = 00000000
[  364.307084] *** Host State ***
17:25:24 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  364.310323] RIP = 0xffffffff812fec40  RSP = 0xffff88808f4af3b0
[  364.316436] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  364.323002] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  364.330853] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  364.336887] CR0=0000000080050033 CR3=000000009f956000 CR4=00000000001426f0
[  364.344038] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  364.350751] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  364.356927] *** Control State ***
[  364.360438] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  364.367254] EntryControls=0000d1ff ExitControls=002fefff
[  364.372821] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  364.379789] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  364.386665] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  364.393373]         reason=80000021 qualification=0000000000000000
[  364.399748] IDTVectoring: info=00000000 errcode=00000000
[  364.405390] TSC Offset = 0xffffff38ea9642f1
17:25:24 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x202, 0x0)
mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x10031, 0xffffffffffffffff, 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000280)={0x7}, 0x7)

17:25:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000380))

[  364.409763] TPR Threshold = 0x00
[  364.413282] EPT pointer = 0x000000009d55101e
17:25:24 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000340), 0x4)
socket$key(0xf, 0x3, 0x2)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioperm(0x0, 0x0, 0x0)
r4 = dup(r3)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x0)
ftruncate(r5, 0x2007fff)
sendfile(r4, r5, 0x0, 0x8000ffeffffe)

17:25:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:25 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x2})

[  364.894835] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
17:25:25 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x64)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:25:25 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000080))
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xd6})

17:25:25 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:25 executing program 4:
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:26 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000340), 0x4)
socket$key(0xf, 0x3, 0x2)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
ioperm(0x0, 0x0, 0x0)
r4 = dup(r3)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x0)
ftruncate(r5, 0x2007fff)
sendfile(r4, r5, 0x0, 0x8000ffeffffe)

17:25:26 executing program 2:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x200000002b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x104)

[  366.226620] *** Guest State ***
[  366.230274] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  366.239374] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  366.248679] CR3 = 0x0000000000000000
[  366.252565] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  366.258713] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  366.264993] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  366.271937] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  366.280263] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  366.288516] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  366.296715] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  366.304898] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  366.313277] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  366.322724] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  366.330901] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  366.339201] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  366.347703] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  366.355911] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  366.362486] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  366.370546] Interruptibility = 00000000  ActivityState = 00000000
[  366.377173] *** Host State ***
[  366.380448] RIP = 0xffffffff812fec40  RSP = 0xffff88808f62f3b0
[  366.386705] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  366.393299] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  366.401785] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  366.407855] CR0=0000000080050033 CR3=0000000053cc5000 CR4=00000000001426e0
[  366.415196] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  366.422048] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  366.428256] *** Control State ***
[  366.431924] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  366.438755] EntryControls=0000d1ff ExitControls=002fefff
[  366.444540] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  366.451623] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  366.458397] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  366.465266]         reason=80000021 qualification=0000000000000000
[  366.471776] IDTVectoring: info=00000000 errcode=00000000
[  366.477467] TSC Offset = 0xffffff37cffb4335
[  366.482073] TPR Threshold = 0x00
[  366.485504] EPT pointer = 0x000000008f4bb01e
17:25:26 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
syz_open_pts(r0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5437, 0x0)

17:25:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xa})

17:25:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00105e75af034b00000000008906000108000604000056df23d56558ac141400000000000000ac1414bb7d4f260f1c4b8665289ef434888b03fd3b09604e93f4f1b2a9df796bc232db93d7888c259755f1b23e650ffed78e154d5d40884f950c648b4bf0eff5ceb866339ec6b0459fc77db918e5b27a409028a4f596ae2f37d68015b2af859031988876b3b10381dbaac04b798fe582a438acc5ff3e9559fc06f63d3d0a681e8ae5fa59e8737d2e630ca30c6fcd55d15a569612a07f5e77481448739f50faac856525d89ecadaa1e5c9f1f41ae903afc4cb6b3770df6d4295a2581dff601d"], 0x0)

17:25:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:27 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x12300, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x10000014c)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000280)={@mcast2, <r4=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340)=r4)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)

17:25:27 executing program 4:
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:27 executing program 3:
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2ae07fc811aad78b8ba2e69f84ea3cb19b8939b362c595ec0a779fa4ecc9a9d94632f6d3e84dc1617adf68a7113a063729413b2b0b6699f741", 0x39}], 0x1}], 0x1, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x14)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x146})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  367.406195] *** Guest State ***
[  367.409913] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  367.419081] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  367.428151] CR3 = 0x0000000000000000
[  367.432238] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  367.438410] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  367.444595] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  367.451851] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  367.460160] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  367.468340] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  367.476629] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  367.484932] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  367.493104] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  367.501156] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  367.509456] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  367.517596] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  367.526791] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  367.534949] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  367.541416] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  367.549171] Interruptibility = 00000000  ActivityState = 00000000
[  367.555617] *** Host State ***
[  367.559077] RIP = 0xffffffff812fec40  RSP = 0xffff88808e41f3b0
[  367.565242] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  367.571953] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  367.579816] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  367.585884] CR0=0000000080050033 CR3=000000009d451000 CR4=00000000001426f0
[  367.593058] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  367.599788] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  367.605994] *** Control State ***
[  367.609509] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  367.616500] EntryControls=0000d1ff ExitControls=002fefff
[  367.622099] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  367.629700] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  367.636610] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  367.643368]         reason=80000021 qualification=0000000000000000
[  367.649829] IDTVectoring: info=00000000 errcode=00000000
[  367.655548] TSC Offset = 0xffffff372f48cfb0
[  367.659934] TPR Threshold = 0x00
[  367.663456] EPT pointer = 0x0000000090edf01e
[  367.691945] ptrace attach of "/root/syz-executor.3"[12630] was attempted by "/root/syz-executor.3"[12631]
17:25:27 executing program 2:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x1)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f000027b000/0x3000)=nil)
io_setup(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)

17:25:27 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  368.057798] *** Guest State ***
[  368.061350] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  368.070536] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  368.079677] CR3 = 0x0000000000000000
[  368.083795] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  368.089833] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  368.096111] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  368.102963] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  368.111198] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.119535] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.127881] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.136587] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.144792] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.153010] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  368.161077] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  368.169279] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  368.177454] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  368.185705] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  368.192282] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  368.199889] Interruptibility = 00000000  ActivityState = 00000000
[  368.206326] *** Host State ***
[  368.209740] RIP = 0xffffffff812fec40  RSP = 0xffff88808f62f3b0
[  368.216021] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  368.222581] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  368.230626] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  368.236828] CR0=0000000080050033 CR3=000000009d621000 CR4=00000000001426f0
[  368.244147] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  368.251035] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  368.257582] *** Control State ***
[  368.261144] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  368.267981] EntryControls=0000d1ff ExitControls=002fefff
[  368.273728] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  368.280741] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  368.287761] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  368.294488]         reason=80000021 qualification=0000000000000000
[  368.300861] IDTVectoring: info=00000000 errcode=00000000
17:25:28 executing program 4:
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

[  368.306582] TSC Offset = 0xffffff36d4508484
[  368.310997] TPR Threshold = 0x00
[  368.314546] EPT pointer = 0x000000009ddcb01e
17:25:28 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:28 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[  368.673920] *** Guest State ***
[  368.677475] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  368.686760] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  368.695902] CR3 = 0x0000000000000000
[  368.699705] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  368.706198] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  368.712419] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  368.719196] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  368.727855] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.736099] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.744237] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.752396] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.760450] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  368.768601] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  368.776835] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  368.785199] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  368.793550] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  368.801757] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  368.808441] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  368.816170] Interruptibility = 00000000  ActivityState = 00000000
[  368.822615] *** Host State ***
[  368.826109] RIP = 0xffffffff812fec40  RSP = 0xffff888090c9f3b0
[  368.832398] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  368.838911] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  368.847131] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  368.853517] CR0=0000000080050033 CR3=0000000077327000 CR4=00000000001426e0
[  368.860775] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  368.867821] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  368.874185] *** Control State ***
[  368.877729] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  368.884623] EntryControls=0000d1ff ExitControls=002fefff
[  368.890187] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  368.897874] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  368.904830] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  368.911973]         reason=80000021 qualification=0000000000000000
[  368.918450] IDTVectoring: info=00000000 errcode=00000000
[  368.924410] TSC Offset = 0xffffff3680e7a6cb
[  368.929089] TPR Threshold = 0x00
[  368.932785] EPT pointer = 0x00000000a0f1101e
17:25:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a)

17:25:29 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)

17:25:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  370.173839] *** Guest State ***
[  370.177485] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  370.186772] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  370.195923] CR3 = 0x0000000000000000
[  370.199798] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  370.206163] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  370.212317] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  370.219416] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  370.227673] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.235965] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.244280] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.252573] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.260883] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.269101] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  370.277442] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  370.285751] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  370.293924] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  370.302385] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  370.308972] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  370.316663] Interruptibility = 00000000  ActivityState = 00000000
[  370.323072] *** Host State ***
[  370.326341] RIP = 0xffffffff812fec40  RSP = 0xffff88807cbbf3b0
[  370.332535] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  370.339003] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  370.347028] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  370.353089] CR0=0000000080050033 CR3=000000009dec2000 CR4=00000000001426e0
[  370.360190] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  370.367091] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  370.373316] *** Control State ***
[  370.376815] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  370.383674] EntryControls=0000d1ff ExitControls=002fefff
[  370.389185] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  370.396275] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  370.403121] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  370.409761]         reason=80000021 qualification=0000000000000000
[  370.416291] IDTVectoring: info=00000000 errcode=00000000
[  370.421883] TSC Offset = 0xffffff35b3a0bd6b
[  370.426253] TPR Threshold = 0x00
[  370.429680] EPT pointer = 0x000000009d8fd01e
17:25:30 executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:25:30 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:30 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xc9, 0x20000)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x1)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
exit(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="daf1440000000000"], 0x0)

17:25:30 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1)

17:25:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  370.742282] *** Guest State ***
[  370.745785] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  370.754852] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  370.764005] CR3 = 0x0000000000000000
[  370.767864] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  370.774054] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  370.780078] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  370.786887] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  370.795081] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.803255] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.811298] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.819601] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.827805] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  370.836094] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  370.844233] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  370.852393] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  370.860441] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  370.868643] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  370.875232] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  370.882887] Interruptibility = 00000000  ActivityState = 00000000
[  370.889197] *** Host State ***
[  370.892587] RIP = 0xffffffff812fec40  RSP = 0xffff8880958af3b0
[  370.898669] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  370.905283] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  370.913254] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  370.919227] CR0=0000000080050033 CR3=000000002a2ee000 CR4=00000000001426f0
[  370.926464] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  370.933290] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  370.939390] *** Control State ***
[  370.943017] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  370.949735] EntryControls=0000d1ff ExitControls=002fefff
[  370.955395] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  370.963800] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  370.970527] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  370.977288]         reason=80000021 qualification=0000000000000000
[  370.983765] IDTVectoring: info=00000000 errcode=00000000
[  370.989262] TSC Offset = 0xffffff35676d57ec
17:25:31 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

17:25:31 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)

[  370.993775] TPR Threshold = 0x00
[  370.997190] EPT pointer = 0x000000007cb5301e
17:25:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:31 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0)=0x101)

[  371.383826] *** Guest State ***
[  371.387449] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  371.396731] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  371.405721] CR3 = 0x0000000000000000
[  371.409484] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  371.415622] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  371.422526] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  371.429345] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  371.437493] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  371.445943] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  371.454079] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  371.462180] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  371.470211] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  371.478355] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  371.486460] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  371.494622] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  371.502752] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  371.510765] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  371.517315] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  371.524874] Interruptibility = 00000000  ActivityState = 00000000
[  371.531136] *** Host State ***
[  371.534467] RIP = 0xffffffff812fec40  RSP = 0xffff88807bbaf3b0
[  371.540500] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  371.547069] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  371.554983] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  371.560918] CR0=0000000080050033 CR3=000000009f277000 CR4=00000000001426f0
[  371.568098] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  371.574873] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  371.580964] *** Control State ***
[  371.584556] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  371.591259] EntryControls=0000d1ff ExitControls=002fefff
[  371.596974] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  371.604006] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  371.610713] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  371.617473]         reason=80000021 qualification=0000000000000000
[  371.623893] IDTVectoring: info=00000000 errcode=00000000
[  371.629380] TSC Offset = 0xffffff350bcfa093
17:25:31 executing program 5:
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x80003, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)
io_destroy(0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x0, 0x3f, 0x7d, 'queue0\x00', 0x4})
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000300))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)

17:25:31 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  371.633844] TPR Threshold = 0x00
[  371.637248] EPT pointer = 0x000000007a3a001e
17:25:31 executing program 2:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xa})

17:25:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)

17:25:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:32 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x8})
write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000008500000000000000000075b60b034400000000000000000000000000000000"], 0x2a)

17:25:32 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  372.732001] sd 0:0:1:0: tag#954 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  372.740189] sd 0:0:1:0: tag#954 CDB: Read(6) 08 00 00 00 00 00
[  372.943084] sd 0:0:1:0: tag#897 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  372.951329] sd 0:0:1:0: tag#897 CDB: Read(6) 08 00 00 00 00 00
[  372.965391] *** Guest State ***
[  372.968891] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  372.978004] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  372.987099] CR3 = 0x0000000000000000
[  372.990879] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  372.997028] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  373.003203] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  373.009942] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  373.018109] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  373.026283] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  373.034465] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  373.042683] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  373.050732] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  373.058903] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  373.067026] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  373.075271] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  373.083520] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  373.091684] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  373.098671] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  373.106404] Interruptibility = 00000000  ActivityState = 00000000
[  373.112766] *** Host State ***
[  373.116011] RIP = 0xffffffff812fec40  RSP = 0xffff8881042af3b0
[  373.122233] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  373.128749] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  373.136766] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
17:25:33 executing program 2:
socket$inet6(0xa, 0x2, 0x200000000000003a)

17:25:33 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x0)

[  373.142789] CR0=0000000080050033 CR3=000000002ab7a000 CR4=00000000001426f0
[  373.149862] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  373.156768] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  373.162994] *** Control State ***
[  373.166501] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  373.173366] EntryControls=0000d1ff ExitControls=002fefff
[  373.178876] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  373.186006] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
17:25:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x8})
write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000008500000000000000000075b60b034400000000000000000000000000000000"], 0x2a)

[  373.192899] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  373.199538]         reason=80000021 qualification=0000000000000000
[  373.206159] IDTVectoring: info=00000000 errcode=00000000
[  373.211763] TSC Offset = 0xffffff3434345d2f
[  373.216123] TPR Threshold = 0x00
[  373.219540] EPT pointer = 0x000000007a52d01e
17:25:33 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:33 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$rtc(0xffffffffffffff9c, 0x0, 0x10102, 0x0)
rt_sigtimedwait(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100))
ptrace(0x10, r0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

17:25:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = inotify_init1(0x0)
fstat(0xffffffffffffffff, 0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000002bc0)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0xc)
ptrace$setopts(0x4205, r2, 0x8000000002, 0xa06ff1)

17:25:33 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  373.561969] sd 0:0:1:0: tag#904 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  373.570227] sd 0:0:1:0: tag#904 CDB: Read(6) 08 00 00 00 00 00
17:25:33 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendto$inet6(r0, &(0x7f0000bc2000)="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", 0x2b1, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
sendmmsg(r0, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000f89000)='t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4)
listen(r0, 0x6f)
r2 = accept4(r0, 0x0, &(0x7f0000622ffc), 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6)
write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYPTR64], 0x8)
ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8)

[  373.615046] ptrace attach of "/root/syz-executor.3"[10954] was attempted by "/root/syz-executor.3"[12778]
17:25:33 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000f81000)=0x90)

17:25:33 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  373.739303] ptrace attach of "/root/syz-executor.3"[10954] was attempted by "/root/syz-executor.3"[12786]
17:25:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x7, 0x5})

17:25:34 executing program 2:
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x10000221, 0x0)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x611, 0x0)
fcntl$setstatus(r2, 0x4, 0x80)
pwritev(r2, &(0x7f00000003c0), 0x273, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0)
write(r0, &(0x7f0000000000)="d9", 0x1)
write(r0, &(0x7f0000000000), 0xff85)
write(r0, &(0x7f00000001c0), 0xfec4)

17:25:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:34 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sysfs$2(0x2, 0x0, 0x0)

17:25:34 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:34 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:34 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:25:34 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:34 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00\x00\x00\t\xf6\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f00000000c0), 0x15f, 0x0, 0x0, 0x98c60aa9aa64a816)

17:25:34 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:25:35 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:35 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:35 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x0, 0x5})

17:25:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa97, 0x4, {0x200000000002, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}}})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2)
dup3(r0, r1, 0x0)

17:25:35 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x200, 0x0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
dup2(r0, r1)
execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
write$P9_RMKDIR(r1, 0x0, 0x0)

17:25:35 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000bba000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0)
close(r1)
close(r0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getrandom(0x0, 0x0, 0x0)

17:25:35 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:35 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:35 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x7, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000280)={@mcast2, <r4=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340)=r4)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)

17:25:36 executing program 5:
r0 = socket(0x2, 0x4003, 0x0)
setsockopt(r0, 0x0, 0x3, &(0x7f0000000080)="99fe358a", 0x4)
connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10)
writev(r0, &(0x7f0000000040)=[{0x0}], 0x1)

17:25:36 executing program 3:
prctl$PR_MCE_KILL_GET(0x22)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getpgid(0x0)
sched_getaffinity(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000ac80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f000000ad00)=0x7, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f000000ae80)={0x0, @aes256})

17:25:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:36 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:36 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)

17:25:36 executing program 5:
syz_open_pts(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

17:25:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:36 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:36 executing program 3:
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x80003, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0)
io_destroy(0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x0, 0x3f, 0x7d, 'queue0\x00', 0x4})

17:25:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:36 executing program 5:
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

17:25:37 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000100)=0x4, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

17:25:37 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:37 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:37 executing program 5:
syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61dfd6c2044a1107fe8000000000000000000000000000bbfe8000000000000000000000000000bbbf0800040000000000000000000000000000ffffe0000002fe88000000000000000000000000000100000000000000000000020000000001000000000000000000000000000000002f06000100000000fe8000000000000000000000000000aa00000000000000000000000000000001ff0200000000000000000000000000ff010000000000000000000000000001bb00093966000000623e00000000000004010107100000000702008f00040000000000000005020001c910fe88000000000000000000000000000100fe1328105ba5e2c561a51c460a5093aa3a3a8b60ce2dde80f351ef34d40c48af51f619fc13048686507dd6c127c3d398be9f5a2a847b5174901a1197f626c13224564ef4e815a7ecfacbc179baf6d637c1b21909e66ba9ead20cd9a01d5f23de011563f622e4f3cd4fddf374ed6e984457e89b7181ba1b8725a12d6d68583a62243137a4a82b519fde7316f1a1a3a1a05f1377d4466d5cb0f1f7a9f7214152d505d8f3de01649c20eaeebd59f8ea46f95d0e1bce3f7fc9eec8535995abc4845da0c5248cf7c798edbbc6d3e34c29e7793abb0d2c74960a1a2bdaa73de418db17566ddb4fd8cb80fa2b9cef45a7b5f802384813e58b914795664b64c4f47b9b04010409c76df632e681791047142bfa1c940f32541ca5580adc429244c38c791fa1079c66716b0deb30fcbd03d764bfc9aa7930bb412ae3ae9c41b8a800114e15b04759864a8ecfc0c73d763a6b07a5d01ab2163e6aea05483da285fcd1a28d0d534dbf56e603d8cd305003e436fc36898c398de3a23606713d4a915450a67a075cccd7cc6d00282352eabedd1e2545615e243bab4ab52614769e8531875632e3816868ce554568ef3a29f0453331ce5cbf0200000028968b4d4fc532d3b4c45ebcdc4b7279423dfe02427d42673b4b82fc0b98e3311641437225d9000214010000000000ff010000000000000000000000000001fe8000000000000000000000000000bbff020000000000000000000000000001fe880000000000000000000000000001579782a379240d7b952b21121c338f92ff010000000000000000000000000001fe80000000000000000000000000000ffe8000000000000000000000000000aafe800000000000001a000000000000bbff0100000000000000000000000000012c0e04070010010000000000000000000000001000000000fe80000000000000000000000000002b00000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000002fe8000000000000000000000000000aa010009415000000038acf8000054da50f8498d1300000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffffffffffffb902000000000000c91000000000000000000000ffffffffffff0401000000000000000000000000000400000000000300004e220000"], 0x0)

17:25:37 executing program 3:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x14)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0x0, 0x146})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

17:25:37 executing program 2:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x2)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x91, "dbd991f4e683a1fa07e7c13bab55fa8d1fdb2ac12a87d37ec31732b7b5834d0d2caf7e7d44266aaf74b9f20dbbc4ba7ff03e393b8d091f424a2cff9726d5a0b68ca02da0327fb52de999b8a942d982cb45299605b86a81079073e59228c0c811e53910aa71429142ca59d6228ce1adf37d95e055f45d413129f2b00746613cf80d87fb2d74f96bbdbab7b1308a57b6d426"}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200))
ppoll(&(0x7f0000000180)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x2d6)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r1)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r4)

17:25:37 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:37 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100})

17:25:37 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
read(r1, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
write$binfmt_elf64(r3, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93)
sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0x240)

17:25:37 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:37 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  378.260044] *** Guest State ***
[  378.263777] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  378.272889] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  378.282473] CR3 = 0x0000000000000000
[  378.286231] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  378.292364] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  378.298394] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  378.305353] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  378.313465] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  378.321512] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  378.330523] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  378.338700] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  378.346824] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  378.354998] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  378.363122] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  378.371147] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  378.379330] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  378.387440] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  378.393995] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  378.401500] Interruptibility = 00000000  ActivityState = 00000000
[  378.407896] *** Host State ***
[  378.411129] RIP = 0xffffffff812fec40  RSP = 0xffff88808d8cf3b0
[  378.417273] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  378.423812] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  378.431751] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  378.437764] CR0=0000000080050033 CR3=000000008e11e000 CR4=00000000001426f0
[  378.444907] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  378.451721] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  378.457808] *** Control State ***
[  378.461385] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  378.468189] EntryControls=0000d1ff ExitControls=002fefff
[  378.473770] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  378.480755] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  378.487590] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  378.494301]         reason=80000021 qualification=0000000000000000
[  378.500663] IDTVectoring: info=00000000 errcode=00000000
[  378.506276] TSC Offset = 0xffffff315ce3c062
17:25:38 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  378.510634] TPR Threshold = 0x00
[  378.514145] EPT pointer = 0x000000008db3001e
17:25:38 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x6)

17:25:38 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100})

17:25:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  379.102696] *** Guest State ***
[  379.106211] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  379.115714] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  379.124717] CR3 = 0x0000000000000000
[  379.128469] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  379.134606] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  379.140653] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  379.147550] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  379.155724] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  379.163901] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  379.172059] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  379.180279] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  379.188663] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  379.196829] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  379.204995] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  379.213127] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  379.221212] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  379.229372] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  379.235976] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  379.243587] Interruptibility = 00000000  ActivityState = 00000000
[  379.249887] *** Host State ***
[  379.253350] RIP = 0xffffffff812fec40  RSP = 0xffff88808d8cf3b0
[  379.259408] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  379.265979] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  379.273963] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  379.279930] CR0=0000000080050033 CR3=000000007a421000 CR4=00000000001426e0
[  379.288131] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  379.295121] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  379.301250] *** Control State ***
[  379.304929] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  379.311779] EntryControls=0000d1ff ExitControls=002fefff
[  379.317293] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  379.324429] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  379.331191] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  379.337977]         reason=80000021 qualification=0000000000000000
[  379.344460] IDTVectoring: info=00000000 errcode=00000000
[  379.349945] TSC Offset = 0xffffff30ea7693b5
[  379.354442] TPR Threshold = 0x00
[  379.357851] EPT pointer = 0x000000009dec101e
17:25:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000440)='/dev/loop#\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x2000006)

17:25:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100})

17:25:40 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={0x0})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

17:25:40 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:40 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000140)=0x54)

[  380.677338] *** Guest State ***
[  380.680827] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  380.689919] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  380.698998] CR3 = 0x0000000000000000
[  380.701029] IPVS: ftp: loaded support on port[0] = 21
[  380.702918] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  380.702950] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  380.720435] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  380.727337] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  380.735494] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  380.743663] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  380.751808] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  380.759846] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  380.768079] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  380.776226] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  380.784389] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  380.792494] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  380.800530] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  380.808706] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  380.815251] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  380.822888] Interruptibility = 00000000  ActivityState = 00000000
[  380.829151] *** Host State ***
[  380.832492] RIP = 0xffffffff812fec40  RSP = 0xffff88808b75f3b0
[  380.838526] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  380.845094] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  380.853048] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  380.858994] CR0=0000000080050033 CR3=000000007c294000 CR4=00000000001426f0
[  380.866176] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  380.873021] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  380.879116] *** Control State ***
[  380.882803] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  380.889515] EntryControls=0000d1ff ExitControls=002fefff
[  380.895181] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  380.902318] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  380.909030] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  380.915774]         reason=80000021 qualification=0000000000000000
[  380.922232] IDTVectoring: info=00000000 errcode=00000000
17:25:41 executing program 5:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x1f)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
splice(r0, 0x0, r2, 0x0, 0x1000000010005, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

[  380.927715] TSC Offset = 0xffffff3014044ee7
[  380.932232] TPR Threshold = 0x00
[  380.935649] EPT pointer = 0x000000008e83001e
17:25:41 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x8)
r0 = socket$inet6_sctp(0xa, 0x6, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="48729e2c093a1b47148a2bd40cdeaa3595b9e66f24679311ffe658d4113227f30802cc378d07def555e554d2812820ce0d7f94e2497d4dc201c0db9b02db9003acbce6dc0618947724efb1203eae72f6249f8debbd33050fc82350369e28bac0a70d9d89d535f8e2dd1f28544efb2a93d4be06df039a22d7c10233874caed20f76e991ad9e18e290db", 0x89}], 0x1}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x2, 0x0, 0x7c3a)
clone(0x200085fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

17:25:41 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000002bc0)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0xc)
ptrace$setopts(0x4205, r2, 0x8000000002, 0xa06ff1)

17:25:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  381.517237] ptrace attach of "/root/syz-executor.3"[10954] was attempted by "/root/syz-executor.3"[13058]
17:25:41 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100})

[  381.638991] *** Guest State ***
[  381.642578] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  381.651504] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  381.660608] CR3 = 0x0000000000000000
[  381.664491] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  381.670512] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  381.676723] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  381.683690] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  381.691869] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  381.699906] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  381.708191] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  381.716323] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  381.724570] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  381.732761] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  381.740801] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  381.749015] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  381.757165] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  381.765354] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  381.771925] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  381.779431] Interruptibility = 00000000  ActivityState = 00000000
[  381.785858] *** Host State ***
17:25:41 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  381.789102] RIP = 0xffffffff812fec40  RSP = 0xffff888077caf3b0
[  381.795307] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  381.801880] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  381.809738] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  381.815832] CR0=0000000080050033 CR3=000000008b707000 CR4=00000000001426f0
[  381.823084] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  381.829806] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  381.836066] *** Control State ***
17:25:41 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={0x0})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

[  381.839568] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  381.846400] EntryControls=0000d1ff ExitControls=002fefff
[  381.851983] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  381.858988] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  381.865834] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  381.872536]         reason=80000021 qualification=0000000000000000
[  381.878923] IDTVectoring: info=00000000 errcode=00000000
[  381.884567] TSC Offset = 0xffffff2f8d91297d
[  381.888922] TPR Threshold = 0x00
[  381.892442] ptrace attach of "/root/syz-executor.3"[10954] was attempted by "/root/syz-executor.3"[13058]
[  381.902287] EPT pointer = 0x0000000079e2801e
17:25:42 executing program 5:
syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
symlink(&(0x7f0000000040)='./file2\x00', &(0x7f0000000000)='./file2\x00')
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x103e, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/11, 0x485)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = creat(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8)
r2 = dup2(r0, r1)
execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x10000000000841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file2\x00', 0x0, 0x0)
ioctl$TIOCLINUX5(r2, 0x541c, 0x0)

17:25:42 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x81)
r1 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$FUSE_STATFS(r2, &(0x7f0000000180)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x7f}}}, 0x60)

17:25:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:42 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0x1000)
r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x40000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  382.477172] *** Guest State ***
[  382.480651] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  382.490363] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  382.499327] CR3 = 0x0000000000000000
[  382.503203] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  382.509229] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  382.515332] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  382.522138] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  382.530181] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  382.538307] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  382.546443] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  382.554704] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  382.562902] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  382.571039] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  382.579169] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  382.587378] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  382.595484] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  382.603586] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  382.610058] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  382.617619] Interruptibility = 00000000  ActivityState = 00000000
[  382.624012] *** Host State ***
[  382.627264] RIP = 0xffffffff812fec40  RSP = 0xffff88808f39f3b0
[  382.633388] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  382.639845] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  382.647798] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  382.653838] CR0=0000000080050033 CR3=0000000090a08000 CR4=00000000001426e0
[  382.660904] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  382.667798] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  382.673969] *** Control State ***
[  382.677467] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  382.684261] EntryControls=0000d1ff ExitControls=002fefff
[  382.689764] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  382.696856] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  382.703653] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  382.710283]         reason=80000021 qualification=0000000000000000
[  382.717024] IDTVectoring: info=00000000 errcode=00000000
[  382.722761] TSC Offset = 0xffffff2f1e5e8e29
17:25:42 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100})

[  382.727120] TPR Threshold = 0x00
[  382.730555] EPT pointer = 0x000000007ab5201e
17:25:43 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

17:25:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
close(r0)

17:25:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:43 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00\xdc\x0e\x9d\x12L\xc4\xf3B[:,\xeb\x93\xdb\x15\xd2y\x04\xcd$\xae\xa8`\xa9\xf0\xeb\xa8CvA\xfcR\xf3\x04\xf1\xa8\x90\xe5OQ\xdc\xff\x83-\xb0Y\x80h\xaf\x8b~}\xa8\x1d\x95^e#X\x85\x1a\xbe\xb5\xd7g\x06\x87.\xe8\x02)\x13\x89\x99`\xb21\xcfIq\x83y0{\xa3\xd6h\x90\xcc\xf6\xf4\xad\x1a\x7f\x8a\xf5\x98\xc7\x84\xb5<h\x05\xfc\xc7\x1f\x94\xe4\x9a\x17\xe2\xad\x02\xe68%\xa2\t\x87\x15t\x06\x00qf\xa5\xb7%\xf8\xa0\xbc\x81t\xb6Yn1K\xdc\x9f\xfd\xf0\xbbrM\a\xc6\xae`', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x9b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

17:25:43 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  383.476376] *** Guest State ***
[  383.479947] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  383.489141] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  383.498227] CR3 = 0x0000000000000000
[  383.502108] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  383.508202] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  383.514348] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
17:25:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
close(r0)

[  383.521076] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  383.529361] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  383.537559] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  383.545743] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  383.553891] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  383.562056] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
17:25:43 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0x26}, 'gretap0\x00'}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  383.570086] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  383.578318] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  383.586445] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  383.594607] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  383.602761] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  383.609235] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  383.616879] Interruptibility = 00000000  ActivityState = 00000000
[  383.623766] *** Host State ***
[  383.627021] RIP = 0xffffffff812fec40  RSP = 0xffff88809ec6f3b0
[  383.633196] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  383.639674] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  383.647666] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  383.653723] CR0=0000000080050033 CR3=000000007a270000 CR4=00000000001426f0
[  383.661345] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  383.668996] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  383.675194] *** Control State ***
[  383.678701] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  383.685565] EntryControls=0000d1ff ExitControls=002fefff
[  383.691081] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  383.698216] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  383.705013] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  383.711822]         reason=80000021 qualification=0000000000000000
[  383.718204] IDTVectoring: info=00000000 errcode=00000000
[  383.724094] TSC Offset = 0xffffff2e94915dba
[  383.728462] TPR Threshold = 0x00
[  383.731971] EPT pointer = 0x000000009dc3d01e
17:25:43 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100})

17:25:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x0, 0x0})

17:25:44 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0))

17:25:44 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:44 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
readv(r3, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1)
r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
dup3(r4, r3, 0x0)
tkill(r2, 0x1000000000015)
write$eventfd(r1, &(0x7f0000000080), 0x8)

17:25:44 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:45 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000008500000000000000000075b60b034400000000000000000000000000000000b36142c02e8a21a55c5a0a8979d01678344ece75cc3dfcc6d6"], 0x43)

17:25:45 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0x26}, 'gretap0\x00'}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100})

17:25:45 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:45 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:45 executing program 2:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
r2 = epoll_create(0x2)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200))
ppoll(&(0x7f0000000180)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x2d6)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r1)

17:25:45 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  385.489261] *** Guest State ***
[  385.493010] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  385.502063] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  385.510937] CR3 = 0x0000000000000000
[  385.514831] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  385.520851] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  385.527087] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  385.533901] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  385.542056] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  385.550088] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  385.558249] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  385.566352] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  385.574607] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  385.582782] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  385.590809] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  385.598945] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  385.607055] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  385.615187] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  385.621745] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  385.629243] Interruptibility = 00000000  ActivityState = 00000000
[  385.635678] *** Host State ***
[  385.638922] RIP = 0xffffffff812fec40  RSP = 0xffff88807b8ff3b0
[  385.645078] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  385.651629] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  385.659493] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  385.665747] CR0=0000000080050033 CR3=000000008fc9b000 CR4=00000000001426f0
[  385.672908] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  385.679626] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  385.685864] *** Control State ***
[  385.689381] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  385.696246] EntryControls=0000d1ff ExitControls=002fefff
[  385.701831] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  385.708801] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  385.715695] VMExit: intr_info=80000306 errcode=00000000 ilen=00000004
[  385.722398]         reason=80000021 qualification=0000000000000000
[  385.728757] IDTVectoring: info=00000000 errcode=00000000
[  385.734394] TSC Offset = 0xffffff2d8169a8e4
[  385.738752] TPR Threshold = 0x00
[  385.742258] EPT pointer = 0x000000007aa4c01e
17:25:45 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:46 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:46 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}})

17:25:46 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:46 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0x26}, 'gretap0\x00'}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:46 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:46 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  386.808840] *** Guest State ***
[  386.812495] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  386.821392] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  386.830436] CR3 = 0x0000000000000000
[  386.834283] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  386.840303] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  386.846453] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  386.853270] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  386.861305] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  386.869415] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  386.877538] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  386.885721] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  386.893858] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  386.901975] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  386.910051] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  386.918237] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  386.926395] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  386.934511] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  386.940978] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  386.948541] Interruptibility = 00000000  ActivityState = 00000000
[  386.954973] *** Host State ***
[  386.958242] RIP = 0xffffffff812fec40  RSP = 0xffff88807b8ff3b0
[  386.964385] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  386.970842] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  386.978765] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  386.984830] CR0=0000000080050033 CR3=0000000079ce9000 CR4=00000000001426e0
[  386.992000] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  386.998721] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  387.004943] *** Control State ***
[  387.008444] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  387.015263] EntryControls=0000d1ff ExitControls=002fefff
[  387.020770] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  387.027897] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  387.034691] VMExit: intr_info=80000306 errcode=00000000 ilen=00000004
[  387.041317]         reason=80000021 qualification=0000000000000000
[  387.047792] IDTVectoring: info=00000000 errcode=00000000
[  387.053365] TSC Offset = 0xffffff2cc97ddce4
17:25:47 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:47 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0x26}, 'gretap0\x00'}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:47 executing program 5:
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)

[  387.057729] TPR Threshold = 0x00
[  387.061131] EPT pointer = 0x000000008ea9601e
17:25:47 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x8})

17:25:47 executing program 5:
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)

17:25:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:47 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  387.706282] sd 0:0:1:0: tag#914 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  387.714557] sd 0:0:1:0: tag#914 CDB: Read(6) 08 00 00 00 00 00
[  387.792684] *** Guest State ***
[  387.796263] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  387.805473] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  387.814478] CR3 = 0x0000000000000000
[  387.818233] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  387.824351] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  387.830531] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  387.837360] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  387.845496] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  387.853612] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  387.861749] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  387.869776] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  387.878007] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  387.886142] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  387.894259] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  387.902386] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  387.910423] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  387.918558] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  387.925735] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  387.933415] Interruptibility = 00000000  ActivityState = 00000000
[  387.939678] *** Host State ***
17:25:48 executing program 5:
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)

17:25:48 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, 0x0)
dup2(r1, r1)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  387.943065] RIP = 0xffffffff812fec40  RSP = 0xffff88809ec6f3b0
[  387.949125] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  387.955801] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  387.962416] sd 0:0:1:0: tag#920 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  387.963815] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  387.971832] sd 0:0:1:0: tag#920 CDB: Read(6) 08 00 00 00 00 00
[  387.983856] CR0=0000000080050033 CR3=0000000090f46000 CR4=00000000001426f0
[  387.990918] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  387.997771] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  388.003938] *** Control State ***
[  388.007432] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  388.014272] EntryControls=0000d1ff ExitControls=002fefff
[  388.019768] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  388.027226] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  388.034045] VMExit: intr_info=80000306 errcode=00000000 ilen=00000004
[  388.040688]         reason=80000021 qualification=0000000000000000
[  388.047218] IDTVectoring: info=00000000 errcode=00000000
[  388.052823] TSC Offset = 0xffffff2c431bdd7a
[  388.057188] TPR Threshold = 0x00
[  388.060591] EPT pointer = 0x000000008f1b201e
17:25:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:48 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:48 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:48 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:48 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, 0x0)
dup2(r1, r1)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:48 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:49 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:49 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:49 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:49 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, 0x0)
dup2(r1, r1)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:49 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:49 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x64)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:25:49 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:49 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:50 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:50 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  390.035335] *** Guest State ***
[  390.038820] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  390.048221] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  390.057204] CR3 = 0x0000000000000000
[  390.060967] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  390.067064] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  390.073180] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  390.079914] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  390.088036] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  390.096157] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  390.104286] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  390.112407] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  390.120449] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  390.128592] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  390.137036] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  390.145164] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  390.153282] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  390.161310] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  390.167884] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  390.175461] Interruptibility = 00000000  ActivityState = 00000000
[  390.181833] *** Host State ***
[  390.185080] RIP = 0xffffffff812fec40  RSP = 0xffff88807967f3b0
[  390.191111] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  390.197697] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  390.205661] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  390.211725] CR0=0000000080050033 CR3=000000008fdf6000 CR4=00000000001426e0
[  390.218799] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  390.225655] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
17:25:50 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  390.231883] *** Control State ***
17:25:50 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

[  390.231911] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  390.231932] EntryControls=0000d1ff ExitControls=002fefff
17:25:50 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  390.231964] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  390.231987] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  390.232012] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  390.232034]         reason=80000021 qualification=0000000000000000
[  390.232052] IDTVectoring: info=00000000 errcode=00000000
[  390.232070] TSC Offset = 0xffffff2b146d6cd0
[  390.232085] TPR Threshold = 0x00
[  390.232106] EPT pointer = 0x000000007957101e
[  390.434157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
17:25:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:50 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:50 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

17:25:50 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:50 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:51 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  391.085430] *** Guest State ***
[  391.088935] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  391.098065] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  391.107193] CR3 = 0x0000000000000000
[  391.110950] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  391.117076] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  391.123317] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
17:25:51 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x0, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  391.130063] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  391.140374] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.148518] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.156703] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.164835] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.173055] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.173086] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
17:25:51 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x14)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x146})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

17:25:51 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  391.173124] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
17:25:51 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  391.173150] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
17:25:51 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x0, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  391.173189] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
17:25:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  391.173212] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  391.173236] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  391.173260] Interruptibility = 00000000  ActivityState = 00000000
17:25:51 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x0, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

[  391.173270] *** Host State ***
[  391.173297] RIP = 0xffffffff812fec40  RSP = 0xffff88807aa2f3b0
[  391.173341] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  391.173376] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  391.173404] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
17:25:52 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  391.173434] CR0=0000000080050033 CR3=0000000079eed000 CR4=00000000001426f0
[  391.173467] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  391.173520] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  391.173544] *** Control State ***
[  391.173580] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  391.173612] EntryControls=0000d1ff ExitControls=002fefff
[  391.173667] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  391.173702] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
17:25:52 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  391.173737] VMExit: intr_info=80000306 errcode=00000000 ilen=00000004
[  391.173768]         reason=80000021 qualification=0000000000000000
[  391.173797] IDTVectoring: info=00000000 errcode=00000000
[  391.173825] TSC Offset = 0xffffff2a825bd474
[  391.173850] TPR Threshold = 0x00
[  391.173878] EPT pointer = 0x000000008ea7e01e
[  391.865495] *** Guest State ***
[  391.865529] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  391.865557] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  391.865573] CR3 = 0x0000000000000000
[  391.865591] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  391.865612] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  391.865676] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  391.865711] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  391.865752] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.865790] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
17:25:52 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  391.865826] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.865864] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.865901] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  391.865932] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  391.865969] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  391.865997] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  391.866036] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  391.866061] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  391.866088] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  391.866126] Interruptibility = 00000000  ActivityState = 00000000
[  392.122863] *** Host State ***
[  392.126100] RIP = 0xffffffff812fec40  RSP = 0xffff88807b48f3b0
[  392.132554] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  392.139021] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  392.146992] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  392.153004] CR0=0000000080050033 CR3=0000000079622000 CR4=00000000001426f0
[  392.160073] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  392.166968] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  392.173149] *** Control State ***
[  392.176659] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  392.183482] EntryControls=0000d1ff ExitControls=002fefff
[  392.188978] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  392.196067] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  392.202861] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  392.209480]         reason=80000021 qualification=0000000000000000
[  392.215967] IDTVectoring: info=00000000 errcode=00000000
[  392.221449] TSC Offset = 0xffffff2a1619ce0a
[  392.225909] TPR Threshold = 0x00
[  392.229317] EPT pointer = 0x000000007426001e
17:25:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:52 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:52 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x0, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:54 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x2000000000a, 0x1, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000033c0)={0x1, &(0x7f0000003400)=[{0x16}]}, 0x10)
dup3(r1, r0, 0x0)

17:25:54 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:54 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x0, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:54 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:54 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  394.635244] *** Guest State ***
[  394.638825] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  394.647942] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  394.656944] CR3 = 0x0000000000000000
[  394.660692] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  394.666828] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  394.673008] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  394.679810] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  394.687931] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.696067] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.704197] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.712326] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.720371] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.728513] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  394.736655] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  394.744773] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  394.752887] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  394.760908] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  394.767452] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  394.775049] Interruptibility = 00000000  ActivityState = 00000000
[  394.781313] *** Host State ***
[  394.784648] RIP = 0xffffffff812fec40  RSP = 0xffff8880782ef3b0
[  394.790697] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  394.797261] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  394.805276] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  394.811214] CR0=0000000080050033 CR3=0000000079c0d000 CR4=00000000001426e0
[  394.818356] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  394.825145] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  394.831234] *** Control State ***
[  394.834816] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  394.841597] EntryControls=0000d1ff ExitControls=002fefff
[  394.847113] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  394.854179] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  394.860890] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  394.867587]         reason=80000021 qualification=0000000000000000
[  394.874028] IDTVectoring: info=00000000 errcode=00000000
[  394.879514] TSC Offset = 0xffffff2898e7c8fe
17:25:54 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x0, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:54 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:54 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  394.883975] TPR Threshold = 0x00
[  394.887390] EPT pointer = 0x0000000077e5b01e
17:25:55 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x0, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:55 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x59)

17:25:55 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:55 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:55 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:55 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x0, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:55 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000]})

17:25:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:55 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:55 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x0, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x1)

17:25:56 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  396.032397] *** Guest State ***
[  396.035853] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  396.044919] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  396.053998] CR3 = 0x0000000000000000
[  396.057764] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  396.063908] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  396.069936] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  396.076749] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  396.085824] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  396.093932] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  396.102042] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  396.110079] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  396.118206] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  396.126339] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  396.135061] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  396.143153] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  396.151196] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  396.159303] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  396.165847] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  396.173478] Interruptibility = 00000000  ActivityState = 00000000
[  396.179747] *** Host State ***
[  396.183076] RIP = 0xffffffff812fec40  RSP = 0xffff888077e2f3b0
[  396.189156] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  396.195755] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  396.203703] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  396.209655] CR0=0000000080050033 CR3=0000000078f0a000 CR4=00000000001426e0
[  396.216858] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  396.223655] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  396.229746] *** Control State ***
17:25:56 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001a000d0800000000000000000a000000000000000000001500010014000100ff01000000000000000000000000000166f5c85b1708d9d3b64d7bf38d48d2b477cf144ece2d65e97a4920353eb03bad9c26fc30cab31d4bb38e34e40e5a20f00c4a9d82a1908dfc426f6a489b78913bb5b8d31d0b2de625e3ae07c504b23fe4bbb96976426b163352d4506a18ac490a22a19ba3853532b8858ac039338b63"], 0x1}}, 0x0)

17:25:56 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  396.233353] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  396.240059] EntryControls=0000d1ff ExitControls=002fefff
[  396.245619] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  396.252689] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  396.259407] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  396.266157]         reason=80000021 qualification=0000000000000000
[  396.272591] IDTVectoring: info=00000000 errcode=00000000
[  396.278088] TSC Offset = 0xffffff27da2f5036
[  396.282652] TPR Threshold = 0x00
[  396.286061] EPT pointer = 0x0000000077d9101e
17:25:56 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)

17:25:56 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:56 executing program 4:
r0 = socket$kcm(0xa, 0x802, 0x88)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040409000000c0073510fbff0000b408000000fab7711721000000c9002000004e5e0000388022"], 0x38}, 0x8000)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1}, 0x0)

17:25:56 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:56 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)

17:25:56 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:57 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)

17:25:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x28, 0x829, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

17:25:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:57 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:57 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:25:57 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0)

17:25:57 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000200)={0x10000000002, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7f, 0x0, [{0x0, 0x9, 0x0, [], 0x80ffff}]}})

[  397.418494] *** Guest State ***
[  397.422300] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  397.431223] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  397.440224] CR3 = 0x0000000000000000
[  397.444038] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  397.450054] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  397.456200] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  397.463005] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  397.471058] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  397.479199] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  397.487322] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  397.495414] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  397.503533] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  397.511643] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  397.519692] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  397.527803] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  397.535919] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  397.544002] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  397.550461] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  397.558091] Interruptibility = 00000000  ActivityState = 00000000
[  397.564422] *** Host State ***
17:25:57 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  397.567670] RIP = 0xffffffff812fec40  RSP = 0xffff888077e7f3b0
[  397.573830] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  397.580310] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  397.588320] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  397.594340] CR0=0000000080050033 CR3=0000000077cf2000 CR4=00000000001426e0
[  397.601440] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  397.608294] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  397.614461] *** Control State ***
17:25:57 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  397.617960] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  397.624824] EntryControls=0000d1ff ExitControls=002fefff
[  397.630355] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  397.637449] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  397.644245] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  397.650876]         reason=80000021 qualification=0000000000000000
[  397.657384] IDTVectoring: info=00000000 errcode=00000000
[  397.662942] TSC Offset = 0xffffff271b76e653
[  397.667335] TPR Threshold = 0x00
[  397.670746] EPT pointer = 0x000000008f19401e
17:25:57 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:57 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0)

17:25:58 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0xc)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)

17:25:58 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0)

17:25:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:58 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x64)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x8})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
readahead(r1, 0x7, 0x8)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

[  398.362863] ptrace attach of "/root/syz-executor.4"[13577] was attempted by "/root/syz-executor.4"[13578]
17:25:58 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100))

17:25:58 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:58 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:59 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100))

17:25:59 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:59 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xa97, 0x10000000000004, {0x200000000001, @raw_data="487f418bd584e767174360da6e3df1dfc9935e72dd4af5779ddc0937509590e722538d0a51fb2e8f97e6f6d6f14b18da63eedb9cedf0fa9e65720cd87041904e13e591ca949db2667471d823327db7a8652b51b1b74eb0e86a78119b9eedc43edaa7953dccbb12a1964e4a672b341b6f64d1b3c0e7cf4d56e7c5ce841f8d6fb7772ab2985970dff9d5b47da909f37692c5e500cf3876429535643d35638139f989fdc614eb12673a453baed1409b61de4dc5e41596b776990314bcb37ca94e7310eefe7af20ddfc0"}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100))

17:25:59 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:59 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x3a)
r1 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x200)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup3(r2, r0, 0x0)

17:25:59 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:25:59 executing program 5:

17:25:59 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:25:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:25:59 executing program 4:

17:26:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0)

17:26:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bc030000000000000000000000ce2a40a9"])

17:26:00 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:00 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:00 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x9, 0x1, &(0x7f0000000180)={r1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
fstat(r2, &(0x7f0000000100))
tkill(r0, 0x1000100000016)

17:26:00 executing program 4:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000000180)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
flistxattr(0xffffffffffffffff, 0x0, 0x0)

17:26:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:00 executing program 4:

17:26:01 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:01 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setfsuid(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:01 executing program 5:

17:26:01 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:01 executing program 4:

17:26:01 executing program 5:

17:26:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:01 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:01 executing program 4:

17:26:01 executing program 5:

17:26:01 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:01 executing program 5:

17:26:02 executing program 4:

17:26:02 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:02 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:02 executing program 5:

17:26:02 executing program 4:

17:26:02 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:02 executing program 5:

17:26:02 executing program 4:

17:26:02 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:02 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:03 executing program 5:

17:26:03 executing program 4:

17:26:03 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:03 executing program 5:

17:26:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:03 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:03 executing program 4:

17:26:03 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

17:26:03 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:03 executing program 5:

17:26:03 executing program 4:

17:26:04 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

17:26:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:04 executing program 5:

17:26:04 executing program 4:

17:26:04 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:04 executing program 5:

17:26:04 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

17:26:04 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:04 executing program 5:

17:26:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:04 executing program 4:

17:26:04 executing program 5:

17:26:05 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:05 executing program 4:

17:26:05 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:05 executing program 5:

17:26:05 executing program 4:

17:26:05 executing program 5:

17:26:05 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480))
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:05 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:05 executing program 4:

17:26:06 executing program 5:

17:26:06 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480))
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:06 executing program 5:

17:26:06 executing program 4:

17:26:06 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:06 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:06 executing program 4:

17:26:06 executing program 5:

17:26:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480))
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:06 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:06 executing program 4:

17:26:07 executing program 5:

17:26:07 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:07 executing program 4:

17:26:07 executing program 5:

17:26:07 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, 0x0, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:07 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:07 executing program 4:

[  407.645810] *** Guest State ***
[  407.649257] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  407.658499] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  407.667575] CR3 = 0x0000000000000000
[  407.671355] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  407.677556] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  407.683737] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
17:26:07 executing program 5:

[  407.690548] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  407.698769] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  407.706942] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  407.715222] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  407.723667] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  407.731873] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  407.739923] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  407.748103] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  407.756434] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  407.764642] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  407.772757] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  407.779216] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  407.786902] Interruptibility = 00000000  ActivityState = 00000000
[  407.793456] *** Host State ***
[  407.796740] RIP = 0xffffffff812fec40  RSP = 0xffff88807774f3b0
[  407.802928] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  407.809406] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  407.817392] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  407.823436] CR0=0000000080050033 CR3=00000000782f5000 CR4=00000000001426e0
[  407.831729] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  407.838916] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  407.845168] *** Control State ***
[  407.848975] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  407.855839] EntryControls=0000d1ff ExitControls=002fefff
[  407.861465] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  407.868783] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  407.875625] VMExit: intr_info=80000306 errcode=00000000 ilen=00000004
[  407.882403]         reason=80000021 qualification=0000000000000000
[  407.888781] IDTVectoring: info=00000000 errcode=00000000
17:26:07 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  407.894416] TSC Offset = 0xffffff21a2488b5f
[  407.898811] TPR Threshold = 0x00
[  407.902357] EPT pointer = 0x000000007c6a601e
17:26:08 executing program 4:

17:26:08 executing program 5:

17:26:08 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:08 executing program 4:

17:26:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:08 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, 0x0, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:08 executing program 5:

17:26:08 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:08 executing program 4:

17:26:08 executing program 5:

17:26:08 executing program 4:

17:26:08 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:09 executing program 4:

17:26:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:09 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:09 executing program 5:

17:26:09 executing program 4:

17:26:09 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, 0x0, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:09 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  409.403076] *** Guest State ***
[  409.406470] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  409.415580] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  409.424627] CR3 = 0x0000000000000000
[  409.428401] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  409.434635] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  409.440687] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  409.447672] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  409.455882] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  409.464102] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  409.472267] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  409.480324] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  409.488534] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  409.496685] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  409.504990] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  409.513118] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  409.521197] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  409.529442] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  409.536551] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  409.544234] Interruptibility = 00000000  ActivityState = 00000000
[  409.550527] *** Host State ***
17:26:09 executing program 4:

[  409.553918] RIP = 0xffffffff812fec40  RSP = 0xffff88807aa0f3b0
[  409.559990] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  409.566609] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  409.574597] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  409.580572] CR0=0000000080050033 CR3=000000010289c000 CR4=00000000001426e0
[  409.587834] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  409.594684] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  409.600812] *** Control State ***
[  409.604460] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  409.611190] EntryControls=0000d1ff ExitControls=002fefff
[  409.616836] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  409.624012] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  409.630747] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003
[  409.637590]         reason=80000021 qualification=0000000000000000
[  409.644082] IDTVectoring: info=00000000 errcode=00000000
[  409.649589] TSC Offset = 0xffffff20b8c42983
[  409.654105] TPR Threshold = 0x00
[  409.657634] EPT pointer = 0x00000000a3aed01e
17:26:09 executing program 5:

17:26:09 executing program 4:

17:26:10 executing program 5:

17:26:10 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:10 executing program 5:

[  410.562039] *** Guest State ***
[  410.565511] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  410.574761] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  410.583818] CR3 = 0x0000000000000000
[  410.587585] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  410.593942] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  410.600085] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  410.607048] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  410.616133] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  410.624317] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  410.632536] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  410.640792] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  410.649267] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  410.659737] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  410.668024] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  410.677338] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  410.685583] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  410.693791] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  410.700480] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
17:26:10 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:10 executing program 4:

17:26:10 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:10 executing program 5:

[  410.708356] Interruptibility = 00000000  ActivityState = 00000000
[  410.714904] *** Host State ***
[  410.718220] RIP = 0xffffffff812fec40  RSP = 0xffff88807cbbf3b0
[  410.724697] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  410.731221] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  410.739488] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  410.745729] CR0=0000000080050033 CR3=000000002a24a000 CR4=00000000001426f0
[  410.752998] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  410.759761] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  410.766056] *** Control State ***
[  410.769609] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  410.776471] EntryControls=0000d1ff ExitControls=002fefff
[  410.782057] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  410.789117] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  410.795969] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003
[  410.802743]         reason=80000021 qualification=0000000000000000
[  410.809111] IDTVectoring: info=00000000 errcode=00000000
[  410.814754] TSC Offset = 0xffffff2012f77efb
[  410.819114] TPR Threshold = 0x00
[  410.822654] EPT pointer = 0x000000008db9c01e
17:26:11 executing program 5:

17:26:11 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:11 executing program 4:

17:26:11 executing program 5:

17:26:11 executing program 4:

17:26:11 executing program 5:

17:26:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:11 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:11 executing program 4:

17:26:11 executing program 5:

17:26:11 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:11 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:12 executing program 5:

17:26:12 executing program 4:

17:26:12 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:12 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:12 executing program 4:

17:26:12 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:12 executing program 5:

17:26:12 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  412.739351] *** Guest State ***
[  412.742954] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  412.752087] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  412.760993] CR3 = 0x0000000000000000
[  412.764845] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  412.770879] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  412.777046] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  412.783923] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  412.792058] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  412.800118] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  412.808270] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  412.816408] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  412.824562] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  412.832730] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  412.840783] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  412.848925] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  412.857088] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  412.865242] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  412.871805] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  412.879324] Interruptibility = 00000000  ActivityState = 00000000
[  412.885697] *** Host State ***
[  412.888955] RIP = 0xffffffff812fec40  RSP = 0xffff88807aa2f3b0
[  412.895106] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  412.901682] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  412.909556] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  412.915664] CR0=0000000080050033 CR3=000000007733c000 CR4=00000000001426e0
[  412.922846] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  412.929594] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  412.935861] *** Control State ***
17:26:12 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  412.939389] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  412.946244] EntryControls=0000d1ff ExitControls=002fefff
[  412.951843] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  412.958852] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  412.965717] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003
[  412.972446]         reason=80000021 qualification=0000000000000000
[  412.978853] IDTVectoring: info=00000000 errcode=00000000
[  412.984484] TSC Offset = 0xffffff1ee7899ef2
17:26:13 executing program 4:

[  412.988861] TPR Threshold = 0x00
[  412.992403] EPT pointer = 0x0000000090ca401e
17:26:13 executing program 5:

17:26:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:13 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:13 executing program 4:

17:26:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:13 executing program 5:

17:26:13 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x9, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}})

[  413.802280] *** Guest State ***
[  413.805823] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  413.815461] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  413.824479] CR3 = 0x0000000000000000
[  413.828261] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  413.834493] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  413.840571] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  413.847766] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  413.855982] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  413.864204] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  413.872394] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  413.880480] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  413.888988] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  413.897194] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  413.905692] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  413.913865] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  413.922153] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  413.930271] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  413.936892] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  413.944516] Interruptibility = 00000000  ActivityState = 00000000
[  413.950796] *** Host State ***
[  413.954176] RIP = 0xffffffff812fec40  RSP = 0xffff88808fedf3b0
[  413.960231] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  413.966845] FSBase=00007ff3fb823700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000
[  413.975217] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  413.981207] CR0=0000000080050033 CR3=000000008f6d7000 CR4=00000000001426f0
[  413.988477] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0
[  413.995435] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  414.001777] *** Control State ***
[  414.005291] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  414.012177] EntryControls=0000d1ff ExitControls=002fefff
[  414.017713] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  414.025397] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  414.032262] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  414.038908]         reason=80000021 qualification=0000000000000000
[  414.045643] IDTVectoring: info=00000000 errcode=00000000
17:26:14 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:14 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
mlockall(0x7)
lstat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000400))
munlockall()
socket$nl_netfilter(0x10, 0x3, 0xc)

17:26:14 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:14 executing program 4:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0)
ftruncate(r0, 0x8003f1)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB])
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000200))
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
mlockall(0x7)
lstat(0x0, &(0x7f0000000400))
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x2)
syz_open_dev$usbmon(0x0, 0x4, 0x0)
munlockall()

[  414.051158] TSC Offset = 0xffffff1e56ca6a13
[  414.055736] TPR Threshold = 0x00
[  414.059170] EPT pointer = 0x000000002aaa301e
17:26:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfbfffffffffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000040), 0x230, 0x0)

17:26:14 executing program 5:

17:26:14 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:14 executing program 5:

[  414.979559] *** Guest State ***
[  414.983107] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  414.992170] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  415.001071] CR3 = 0x0000000000000000
[  415.004974] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  415.011098] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  415.017284] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  415.024280] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  415.032440] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  415.040515] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  415.049103] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  415.057313] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  415.065493] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
17:26:15 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  415.073707] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  415.082041] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  415.090091] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  415.098350] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  415.106489] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  415.113106] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  415.120668] Interruptibility = 00000000  ActivityState = 00000000
[  415.127099] *** Host State ***
[  415.130886] RIP = 0xffffffff812fec40  RSP = 0xffff888078daf3b0
[  415.137062] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  415.143638] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  415.151491] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  415.157633] CR0=0000000080050033 CR3=00000000795ad000 CR4=00000000001426e0
[  415.164843] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  415.171714] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
17:26:15 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0xff49)

[  415.177812] *** Control State ***
[  415.181327] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  415.188234] EntryControls=0000d1ff ExitControls=002fefff
[  415.193861] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  415.200857] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  415.217802] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
17:26:15 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  415.224710]         reason=80000021 qualification=0000000000000000
[  415.231095] IDTVectoring: info=00000000 errcode=00000000
[  415.236729] TSC Offset = 0xffffff1db44d173c
[  415.241090] TPR Threshold = 0x00
[  415.244644] EPT pointer = 0x000000008f39301e
17:26:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]})
close(r0)

17:26:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:15 executing program 5:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r0, 0x41045508, 0x0)

17:26:15 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:16 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  415.966392] *** Guest State ***
[  415.969835] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  415.979040] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  415.988006] CR3 = 0x0000000000000000
[  415.991874] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  415.997891] RFLAGS=0x0001a202         DR7 = 0x0000000000000400
[  416.004031] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  416.010876] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  416.018990] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  416.027480] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  416.035596] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  416.043761] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  416.051879] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  416.059898] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  416.068049] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  416.076147] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  416.084297] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  416.092389] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  416.098848] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  416.106476] Interruptibility = 00000000  ActivityState = 00000000
[  416.112803] *** Host State ***
[  416.116045] RIP = 0xffffffff812fec40  RSP = 0xffff88808e25f3b0
[  416.122207] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  416.129192] FSBase=00007ff3fb823700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000
[  416.137193] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  416.143232] CR0=0000000080050033 CR3=0000000095810000 CR4=00000000001426e0
[  416.150300] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0
[  416.157142] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  416.163305] *** Control State ***
[  416.166804] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[  416.173632] EntryControls=0000d1ff ExitControls=002fefff
[  416.179163] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  416.186249] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  416.193028] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  416.199662]         reason=80000021 qualification=0000000000000000
[  416.206140] IDTVectoring: info=00000000 errcode=00000000
[  416.211711] TSC Offset = 0xffffff1d2cf68c48
[  416.216068] TPR Threshold = 0x00
[  416.219496] EPT pointer = 0x000000007c3c001e
17:26:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x2000000000079})
r0 = memfd_create(&(0x7f0000000100)='}\x00N\x06\x94\xe2\xe0\xeb\xab\xe1\x03\x1e\xc8\x8b\x16\x88\';g\xdd\x04r\x0e\x8d\xff{+\a/\xd2\x93\xa7\xcc=6\x15', 0x0)
mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
name_to_handle_at(r0, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000000)=ANY=[], &(0x7f0000001ffc), 0x1400)

17:26:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
read$FUSE(r2, &(0x7f0000001780), 0xfffffdd4)

17:26:16 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:16 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x64)
ioctl(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1)

17:26:16 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x800000006008, 0x0)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0)

17:26:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe, 0xfdfdffff00000000]})
close(r0)

17:26:17 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={[], [], @remote}, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2})

17:26:17 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:17 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000180)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x2)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
sendfile(r1, r2, &(0x7f0000000080), 0x100005)
fcntl$addseals(r2, 0x409, 0x8)
pwritev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000400)="ab", 0x1}], 0x1, 0x6b6b6b)
dup3(r0, r2, 0x0)

17:26:17 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:17 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001140)='net/ipv6_route\x00')
sendfile(r0, r1, 0x0, 0x80000001)

17:26:18 executing program 3:
seccomp(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:18 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380), 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000340))

17:26:18 executing program 5:
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x1, 0x200)

[  418.415964] audit: type=1326 audit(1551720378.477:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14215 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
17:26:18 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000006c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:18 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:18 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82)
r1 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)

17:26:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ppoll(&(0x7f0000000000)=[{r1, 0x5091}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xa})

17:26:19 executing program 3:
seccomp(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:19 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:19 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000006c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
[  419.423474] audit: type=1326 audit(1551720379.487:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14251 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:19 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000000700), 0x1ae, 0x10400003)
syz_genetlink_get_family_id$tipc2(0x0)

17:26:19 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r0, 0x8038550a, 0x0)

17:26:20 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x80000001, 0x12)

17:26:20 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001580)={r0})

17:26:20 executing program 3:
seccomp(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = dup(r0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)

17:26:20 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000006c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r2 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r4=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r6, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r7 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  420.575942] audit: type=1326 audit(1551720380.637:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14286 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
17:26:20 executing program 0:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
r2 = epoll_create(0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200))
ppoll(&(0x7f0000000180)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x2d6)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(r1)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)

17:26:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)

[  420.789533] input: syz1 as /devices/virtual/input/input13
[  420.868659] input: syz1 as /devices/virtual/input/input14
17:26:21 executing program 4:
r0 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x9, 0x1, &(0x7f0000000180)={r1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x23)
fstat(r2, &(0x7f0000000100))
tkill(r0, 0x1000100000016)

17:26:21 executing program 5:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x800000006008, 0x0)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0)

17:26:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/203, 0xcb}], 0x1, 0x0)

17:26:21 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:21 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:21 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:21 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000100)="1f0000000104ffce9e67fa5eaca27100f305010008000100010423dcffdf00", 0x1f)

17:26:21 executing program 4:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000440)='./file0\x00', 0x1040, 0x0)
execve(0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
dup2(r0, r1)
execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x842, 0x40)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000380))
timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)

17:26:21 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa97, 0x4, {0x200000000002, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}}})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r0, 0x4}], 0x1, 0x0)

[  421.764357] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
17:26:22 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:22 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:22 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000280))
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000600)=<r0=>0x0)
getpriority(0x2, r0)
membarrier(0x2b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0xb678, 0x1, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002)
r2 = socket$inet6(0xa, 0x3, 0x3a)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=<r5=>0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r5)
r6 = userfaultfd(0x3fffe)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, 0xfffffffffffffffe)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0)
write$P9_RLOPEN(r7, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})
recvfrom$inet6(r3, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c)
mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r4, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8004700b, &(0x7f0000000040))
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c)
get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a})
ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000005c0))
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x20000000, @local, 0x1000000000}, {0xa, 0x0, 0x0, @mcast1}, 0x2, [0x0, 0xa800000000000000, 0xfffffffffffffffb, 0x7]}, 0x20)

17:26:22 executing program 0:
timerfd_create(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)

17:26:22 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
dup2(r0, r1)

17:26:22 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe, 0x0, 0x1000000000000]})
close(r0)

17:26:22 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:22 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0)

17:26:23 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r2, 0x5452, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x29000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(r0, r2, 0x0)

17:26:23 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000400)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x7, &(0x7f0000000040)={0x0, <r3=>0x0})
io_setup(0x0, 0x0)
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340))

17:26:23 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:23 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:23 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0), 0xc)

17:26:23 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:24 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffd})

17:26:24 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:24 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:24 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x2000000000a, 0x1, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000033c0)={0x1, &(0x7f0000003400)=[{0x16}]}, 0x10)
dup3(r1, r0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

17:26:24 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:24 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:24 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  424.642565] protocol 88fb is buggy, dev hsr_slave_0
[  424.648381] protocol 88fb is buggy, dev hsr_slave_1
[  424.654651] protocol 88fb is buggy, dev hsr_slave_0
[  424.660427] protocol 88fb is buggy, dev hsr_slave_1
17:26:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f00000000c0))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x5})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:24 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:24 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x0, 0x0})
syz_genetlink_get_family_id$team(0x0)

17:26:25 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:25 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:25 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:25 executing program 4:
r0 = syz_open_dev$video(0x0, 0xc9, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0)
syz_open_pts(r1, 0x1)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r2, r3)
read(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)

17:26:25 executing program 0:

17:26:25 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:25 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x7fff})

17:26:26 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:26 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x198, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd3e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800000000}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0x9}}}}]}]}, 0x198}}, 0x4080)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446)

17:26:26 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:26 executing program 4:
r0 = syz_open_dev$video(0x0, 0xc9, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0)
syz_open_pts(r1, 0x1)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r2, r3)
read(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)

17:26:26 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:26 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:26 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:26 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:27 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:27 executing program 4:
r0 = syz_open_dev$video(0x0, 0xc9, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0)
syz_open_pts(r1, 0x1)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r2, r3)
read(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)

17:26:27 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:27 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:27 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:27 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x100)
r1 = creat(0x0, 0x0)
memfd_create(0x0, 0x10000)
socket(0x1, 0x4, 0xaa7b)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0)
syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xfc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCMSET(r1, 0x5418, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)='s\\z8\x00\x80\x01\x01\x00\x00\x00\x00\x00\x00\x94\xe0$qq\x84\x10\xb1\xc7\xa0&\x9f\x04\x8e@\xf8\r\xcd\x1cF\xc4(\x87\xcf\x14\xf6\xd5\xbb\xa8\xa4-\xd5\x9e`\xe3\xa7\x88\xe6\xe0AsO\xeb\x12\xd7\xdf|I\x17\xd1\x04\xde\xb2\x9f#\x9b\x8c\x9c\xbd2\xb5\x13\x02\x82\t\xec\xaf\xe8\xbc<\xb6;\xae\x84\xe0\xd2\xf68jz\xbb\xe4\\<7\x17n-\x7f2\x06a\xcc\xa1y/\xff\xba\xc3L\xd9\xe1\xddv;\xc5\xcdD`!{{\xbf\xb5\x84\xd1\x84\xfd~\xab\x0fk\xbe\xef2sE\xe0\x02ek\xfe\xbd\xdc\xe4', 0x0)
clock_gettime(0x6, 0x0)
ioctl$TIOCSCTTY(r1, 0x540e, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc)
tkill(0x0, 0x0)
accept4$packet(r1, 0x0, &(0x7f0000000300), 0x800)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={<r2=>0x0}, &(0x7f0000000680)=0xc)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0xffff, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x800, 0x4, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x5, 0x11, 0xfd24, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x54, 0x9, 0x4, 0x0, 0x10000000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe089, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x2020, 0x1ff, 0x3, 0xf, 0x0, 0x0, 0x3}, r2, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00'})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCEXCL(r1, 0x540c)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r3, &(0x7f0000000480), 0x100000000000021c, 0x0)

17:26:27 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:27 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='cpuacct.usage_sys\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000540)='memorrent\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x40, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000380)={r0})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000580)=ANY=[@ANYBLOB="36f413030000e90000ca3c8aaf24d4369f20856b5f36a2bd363365dbb03ed3c97d7bbb778c9c4f5fbeb666356e72a6fde110243333e8d8c8ac6126a3eac28f62fe5cbabea0c084920b81211cbf98982cf4a408d375f9bcb95b573f2132f840b438d2967b8296008f87b43dc6a185f3d47c0082ffbd5a18dc6f6895f194beebb455f54d9683dffc2120724912d0c1348cb5ad0849bc55f686"])
r5 = perf_event_open(&(0x7f0000000140)={0x5, 0xffffffed, 0x5, 0x8, 0x499, 0x7ff, 0x0, 0x2, 0x20, 0x6, 0x10000, 0x3, 0x52e37ef2, 0x1f8000000000000, 0x10001, 0x4, 0x9, 0xffff, 0x8, 0x8, 0x7fff, 0x24, 0x55, 0x3, 0x8, 0x0, 0x0, 0x9, 0x7, 0x7, 0x2, 0x8001, 0x4, 0x100000001, 0x5, 0x8, 0x5, 0x5, 0x0, 0x7ff, 0x1, @perf_config_ext={0x80e2, 0xfff}, 0x100, 0x0, 0x100000001, 0xb, 0xd7, 0xc000000, 0x844}, 0x0, 0xe, 0xffffffffffffff9c, 0x2)
r6 = openat$cgroup_ro(r4, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x10000)
recvmsg$kcm(r6, &(0x7f0000007f40)={&(0x7f0000007d80)=@hci={0x1f, <r7=>0x0}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007e00)=""/60, 0x3c}, {&(0x7f0000007e40)=""/94, 0x478}], 0x2, &(0x7f0000007f00)=""/16, 0x10}, 0x40000102)
sendmsg(r6, &(0x7f0000009040)={&(0x7f0000007f80)=@ll={0x11, 0x0, r7, 0x1, 0xfffffffffffff000, 0x6, @local}, 0x80, &(0x7f0000009000)=[{&(0x7f0000008000)="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", 0x1000}], 0x1}, 0x20000010)
r8 = socket$kcm(0xa, 0x5, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000080)='./file0\x00', r4}, 0x70)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$cgroup_type(r6, &(0x7f00000000c0)='threaded\x00', 0x9)
socket$kcm(0x29, 0x2, 0x0)
sendmsg(r1, &(0x7f0000001a40)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6erspan0\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="63ed0006f416bbe3bc2780a73af688e4e39da0111028ac51dcec813388eeda4c552ff6af07d8ddf4bdf8f045c269bfd0e63e2e50f022ce9dc3425ab7c2281dc09bf4e7522683635c56bd19652bfec4c48b57ceadf6eb11e63e444a86c742c6", 0x5f}], 0x1}, 0x80)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000280)}, 0x10)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280))
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="077935f47f8a897f0b5614bdd69168b9d9cb9e90c3e59148507728d879192993f89f628d19939e983b6b89e52ac9d7b3665ac3be02f3523f3bab8bb3acb0297fcd0519986a302551ced4f71b098215f7af39a3fdafa10facd40dbff026e391c5938b3e3e8293feb36835094cd5050294b21cd46aef873efff73bf71eb0fa7debba8c942428d78daabf1bcfcdf2758adef882b8ecdf7b6c1c3c80ee3470ea6a", 0x9f}], 0x1}, 0x40000)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x2}, 0xfffffffffffffd8e)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890c, &(0x7f0000000000)={r6})

17:26:27 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:27 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:27 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x28, 0x829, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

17:26:28 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:28 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  428.352133] audit: type=1326 audit(1551720388.407:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
17:26:28 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:28 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, 0xab852ebbe6fbd72e, 0x0, 0x0, 0x0, 0x4})

17:26:28 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  428.979850] audit: type=1326 audit(1551720389.037:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0
17:26:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})

17:26:29 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:29 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:29 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:29 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="8e0394a1ef97"}, 0x14)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "934341c138c7f1bf"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "197105f76ac7511b"}}, 0x48}}, 0x0)

17:26:29 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:29 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080), 0x12)

17:26:29 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:29 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:29 executing program 0:
syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
creat(&(0x7f00000004c0)='./file1\x00', 0x6c)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f00000002c0)=""/11, 0xb)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
dup2(r0, r1)
execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0)

17:26:29 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:29 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:29 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
socketpair(0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/\x00~WMzU\xed\xbb\xc8\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xb1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\x19sT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6d\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\xf7\xff\xff\xff\xff\xff\xff\xff\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xecv:\x1ba=\xd7G\xd5)\xeap\xef\x02\x98\xff\xf5f\x160\xb9\x9ay\xec\x82i\xaf\x9b\xe1x\xae\xca\x17\xfe\xfb\x14\xfd=\x00\x97Z\x99\x9dy\xba\x89M\xba\xe4\xc1\xa6\x06\x00\x00\x00\x00\x00\x00\x00x\"m\a\xe6:?E\x96~\x0e\xe8Y\xbbn\x0f<f\xe6\x8cDR\b\xbb2\xbb#B\x94\x8a\xa3\xf4\x13\xea\x98\x1d\xcfY\xc2s#\xf4\x94^2[\xa0\xe6\x9e\x01nUCj\x93$\xf5\xa4X\xc5\xac\xb6\x01\x10L\xf2\xfcz\xdcg\xa0f/T\x99\xdcOr\xfdM\x8fOh\xad]\xa5.\xd8\xc9)\xf7Q\xf2\x8d\x9dc\xfa4\xb3]O\xcf\xe8\xc5H\xeb5\xe3\xa1\xd0\x8c\a~}~\xa6\x1eqn\xaao\xc3B', 0x0, 0x0)
pipe(0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$set_timeout(0xf, 0x0, 0x0)
dup3(r0, r1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x80, 0x4)

17:26:30 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:30 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:30 executing program 4:
clone(0x202, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
tkill(r0, 0x1000000000016)

17:26:30 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:30 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:30 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:30 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x8004)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
clock_gettime(0x4, &(0x7f00000001c0)={0x0, <r5=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080))
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8)
msgget$private(0x0, 0x80)
msgctl$IPC_STAT(0x0, 0x2, 0x0)

17:26:31 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:31 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:31 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:31 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:31 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:31 executing program 4:
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x80, 0x0)
syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffed6a, 0x40)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

17:26:31 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:32 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:32 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:32 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040000000000000000000000030000800000000003000000000000008400000000000000000000db"], 0x2c)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x286, &(0x7f0000000000)=[{}]}, 0x10)

17:26:32 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:32 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:32 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000200)={0x10000000002, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7f, 0x0, [{0x0, 0x0, 0x0, [], 0x80ffff}]}})

17:26:32 executing program 1:
syz_open_dev$video(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:33 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:33 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:33 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f00000000c0))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:33 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:33 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:33 executing program 1:
syz_open_dev$video(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x77, 0x0, [0x40000106], [0xc1]})

17:26:33 executing program 4:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x400002100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x1, 0x2)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1, 0x0)

17:26:34 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:34 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:26:34 executing program 0:
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400000000004000)

17:26:34 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:34 executing program 1:
syz_open_dev$video(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:34 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80803, 0x0)
write(r0, &(0x7f0000000000)="120000001a002517fc85bc04fef6000d0a0d", 0x12)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)

17:26:35 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:35 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:35 executing program 0:
mlock2(&(0x7f0000334000/0x2000)=nil, 0x2000, 0x0)
mremap(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000335000/0x3000)=nil)

17:26:35 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r2, 0x7})

17:26:35 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:26:35 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:35 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a42f7a085d87c9f3f85a0f0699b9cb9e1d24f45265499347e31612e80a023932948d3e1a02000000f34669e4fd53f514a55c923b803428b1cd8cf464d374482294dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea487090000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d17f32257b8c5c19482ccbab150760201efd893196e8eb1cc5fcd40496ba920e60df120cf09dbd1716ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288c42f619e2c2a30000000c5032f62010000000000004570d991920000e1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079800f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a1c565ec63bee56d449e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01ce76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529021f50f20bcfdbe8579fdd871db4700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289ba88049b7d7e03fa0baa55e0855707cb15ddb7a5a94508b64927342cd2c6d84cc3ec519855370c2b0d4ca797df5174e6a1c5cd03a46d61f4fb88c81ba08ae295a614bef545f922b55c15eb06d1fd3b1bd5f0345b89f50a5d32fa009eb4b2dd1e33d242c188368b44c5e00daa30a6ba1a48758b4bd9fb6ca900addd44672672294d518be08b7977585c5438e4a5eee319c78a08accf4a0e4e692aa231ca932c2"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:26:35 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

17:26:35 executing program 3:
seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:35 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
sendmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)="ce15086a6db06899f1523df101fbd59f2505792acdf4aa59687ae28a0abfd132b7f5f716cae64a2739cafce58865b2abd6ee36e022ebf5abb32b87470fc264c2534f9691880da856fd43b83aecf882d3a854573bd05a9c9c1c10fa0ad01e4311d6dbc5f22308f9fb054c12a645d58faade6e98cf4e7ba430e66f22d254021307eaecaa027d499ec0a53de7e611ca35bab968e92ea70ac8047ddd3087ccea6306055b81e178c3ba415de75edf4958c8c63469765dea2cc98c044d523d1ab75c6af53451a407552f4b132106a3db928a1d69", 0xd1}], 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:26:36 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002dc0)={'batadv0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4)
write$binfmt_aout(r0, &(0x7f0000002f40)=ANY=[@ANYBLOB="0000000000c80000000000000000"], 0xe)

17:26:36 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34})
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x21c, 0x0, 0x0, 0x351)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:26:36 executing program 1:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
pkey_free(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0)
r3 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9)
bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r5=>0x0}, 0x0)
dup2(r1, r1)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timerfd_create(0x9, 0x8007ffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
fcntl$getown(r7, 0x9)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x3})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='\x00\x00\b\x1a\x00\xec\x00\x00\x00\x00\t\x06\t\x00\xdf\x02', 0x9)
r8 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  436.272351] ==================================================================
[  436.279953] BUG: KMSAN: uninit-value in batadv_interface_tx+0x772/0x1e40
[  436.286932] CPU: 0 PID: 14941 Comm: syz-executor.4 Not tainted 5.0.0-rc1+ #9
[  436.294162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  436.303561] Call Trace:
[  436.306422]  dump_stack+0x173/0x1d0
[  436.310171]  kmsan_report+0x12e/0x2a0
[  436.314051]  __msan_warning+0x82/0xf0
[  436.317920]  batadv_interface_tx+0x772/0x1e40
[  436.322511]  ? batadv_softif_is_valid+0xb0/0xb0
[  436.327334]  dev_direct_xmit+0x8a3/0xbb0
[  436.331586]  packet_direct_xmit+0x256/0x3e0
[  436.335994]  ? __packet_rcv_has_room+0xc00/0xc00
[  436.340806]  ? __packet_rcv_has_room+0xc00/0xc00
[  436.345642]  packet_sendmsg+0x79bb/0x9760
[  436.349854]  ? kmsan_internal_chain_origin+0x134/0x230
[  436.355178]  ? kmsan_memcpy_metadata+0xb/0x10
[  436.359733]  ? __vfs_write+0x98a/0xc20
[  436.363676]  ? vfs_write+0x481/0x920
[  436.367472]  ? __se_sys_write+0x17a/0x370
[  436.367497]  ? __x64_sys_write+0x4a/0x70
[  436.367519]  ? do_syscall_64+0xbc/0xf0
[  436.367670]  ? entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  436.367714]  ? kmsan_get_shadow_origin_ptr+0x60/0x440
[  436.367747]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  436.367844]  ? compat_packet_setsockopt+0x360/0x360
[  436.367932]  sock_write_iter+0x3f4/0x4d0
[  436.367988]  ? sock_read_iter+0x4e0/0x4e0
[  436.368012]  __vfs_write+0x98a/0xc20
[  436.368077]  vfs_write+0x481/0x920
[  436.368129]  __se_sys_write+0x17a/0x370
[  436.368176]  __x64_sys_write+0x4a/0x70
[  436.368203]  do_syscall_64+0xbc/0xf0
[  436.368233]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  436.368253] RIP: 0033:0x457e29
[  436.368276] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  436.368289] RSP: 002b:00007fdd32f4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  436.368311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29
[  436.368325] RDX: 000000000000000e RSI: 0000000020002f40 RDI: 0000000000000004
[  436.368339] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  436.368352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd32f506d4
[  436.368365] R13: 00000000004c7228 R14: 00000000004dcda0 R15: 00000000ffffffff
[  436.368395] 
[  436.368403] Uninit was created at:
[  436.368425]  kmsan_save_stack_with_flags+0x7a/0x130
[  436.368446]  kmsan_internal_alloc_meta_for_pages+0x113/0x580
[  436.368466]  kmsan_alloc_page+0x7e/0x100
[  436.368486]  __alloc_pages_nodemask+0x137b/0x5e30
[  436.368524]  alloc_pages_current+0x69d/0x9b0
[  436.529574]  new_slab+0x3c6/0x20b0
[  436.533193]  ___slab_alloc+0x1577/0x2060
[  436.537297]  kmem_cache_alloc+0xae8/0xb60
[  436.541495]  sk_prot_alloc+0xf1/0x500
[  436.545342]  sk_alloc+0xde/0xb90
[  436.548803]  inet_create+0x76f/0x1320
[  436.552665]  __sock_create+0x65f/0xf30
[  436.556594]  __sys_socket+0x174/0x640
[  436.560456]  __se_sys_socket+0x8d/0xb0
[  436.564414]  __x64_sys_socket+0x4a/0x70
[  436.568434]  do_syscall_64+0xbc/0xf0
[  436.572230]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  436.577445] ==================================================================
[  436.584844] Disabling lock debugging due to kernel taint
[  436.590327] Kernel panic - not syncing: panic_on_warn set ...
[  436.596260] CPU: 0 PID: 14941 Comm: syz-executor.4 Tainted: G    B             5.0.0-rc1+ #9
[  436.604866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  436.614256] Call Trace:
[  436.616902]  dump_stack+0x173/0x1d0
[  436.620592]  panic+0x3d1/0xb01
[  436.623928]  kmsan_report+0x293/0x2a0
[  436.627800]  __msan_warning+0x82/0xf0
[  436.631678]  batadv_interface_tx+0x772/0x1e40
[  436.636261]  ? batadv_softif_is_valid+0xb0/0xb0
[  436.640989]  dev_direct_xmit+0x8a3/0xbb0
[  436.645130]  packet_direct_xmit+0x256/0x3e0
[  436.649520]  ? __packet_rcv_has_room+0xc00/0xc00
[  436.654364]  ? __packet_rcv_has_room+0xc00/0xc00
[  436.659175]  packet_sendmsg+0x79bb/0x9760
[  436.663379]  ? kmsan_internal_chain_origin+0x134/0x230
[  436.668710]  ? kmsan_memcpy_metadata+0xb/0x10
[  436.673288]  ? __vfs_write+0x98a/0xc20
[  436.677235]  ? vfs_write+0x481/0x920
[  436.681004]  ? __se_sys_write+0x17a/0x370
[  436.685206]  ? __x64_sys_write+0x4a/0x70
[  436.689322]  ? do_syscall_64+0xbc/0xf0
[  436.693263]  ? entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  436.698698]  ? kmsan_get_shadow_origin_ptr+0x60/0x440
[  436.703941]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  436.709453]  ? compat_packet_setsockopt+0x360/0x360
[  436.714539]  sock_write_iter+0x3f4/0x4d0
[  436.718701]  ? sock_read_iter+0x4e0/0x4e0
[  436.722902]  __vfs_write+0x98a/0xc20
[  436.726724]  vfs_write+0x481/0x920
[  436.730343]  __se_sys_write+0x17a/0x370
[  436.734391]  __x64_sys_write+0x4a/0x70
[  436.738333]  do_syscall_64+0xbc/0xf0
[  436.742105]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  436.747348] RIP: 0033:0x457e29
[  436.750594] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  436.769555] RSP: 002b:00007fdd32f4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  436.777391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29
[  436.784706] RDX: 000000000000000e RSI: 0000000020002f40 RDI: 0000000000000004
[  436.792014] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  436.799957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd32f506d4
[  436.807270] R13: 00000000004c7228 R14: 00000000004dcda0 R15: 00000000ffffffff
[  436.815390] Kernel Offset: disabled
[  436.819057] Rebooting in 86400 seconds..