00600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:08 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00 \x00'}) 16:52:08 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1159.978709] input:  as /devices/virtual/input/input4067 16:52:08 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1160.051282] input:  as /devices/virtual/input/input4068 16:52:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x3c000000}}}}}}}}, &(0x7f0000000000)) 16:52:08 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:08 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:08 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000009ea00"}) 16:52:08 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2c00}}}}}}}}, &(0x7f0000000000)) [ 1160.323793] input:  as /devices/virtual/input/input4069 [ 1160.406431] input:  as /devices/virtual/input/input4070 16:52:08 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:09 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:09 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:09 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:09 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2300"}) 16:52:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x44}}}}}}}}, &(0x7f0000000000)) 16:52:09 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:09 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:09 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1160.791221] input:  as /devices/virtual/input/input4071 [ 1160.851758] input:  as /devices/virtual/input/input4072 16:52:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2f}}}}}}}}, &(0x7f0000000000)) 16:52:09 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) socket(0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:09 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000209e0100"}) 16:52:09 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x4400000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:09 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1161.123291] input:  as /devices/virtual/input/input4073 16:52:09 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x0, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:09 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1161.185191] input:  as /devices/virtual/input/input4074 16:52:10 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x4c) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000019e2900"}) 16:52:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xfeffffff}}}}}}}}, &(0x7f0000000000)) 16:52:10 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000479e0100"}) 16:52:10 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1161.565436] input:  as /devices/virtual/input/input4075 [ 1161.599459] input:  as /devices/virtual/input/input4076 16:52:10 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1161.619305] input:  as /devices/virtual/input/input4077 16:52:10 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x58}}}}}}}}, &(0x7f0000000000)) 16:52:10 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:10 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:10 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e4000"}) [ 1161.879156] input:  as /devices/virtual/input/input4078 16:52:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x6000}}}}}}}}, &(0x7f0000000000)) 16:52:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1161.940907] input:  as /devices/virtual/input/input4079 16:52:10 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000007f00"}) [ 1162.215104] input:  as /devices/virtual/input/input4080 [ 1162.264392] input:  as /devices/virtual/input/input4081 16:52:10 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:10 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000"], 0x15) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:11 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2f000000}}}}}}}}, &(0x7f0000000000)) 16:52:11 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000100"}) [ 1162.529175] input:  as /devices/virtual/input/input4082 16:52:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1162.585766] input:  as /devices/virtual/input/input4083 16:52:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x29000000}}}}}}}}, &(0x7f0000000000)) 16:52:11 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:11 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000500"}) 16:52:11 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000"], 0x1f) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:11 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x4c) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x3000000}}}}}}}}, &(0x7f0000000000)) [ 1162.895905] input:  as /devices/virtual/input/input4084 16:52:11 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1162.967318] input:  as /devices/virtual/input/input4085 16:52:12 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:12 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3200"}) 16:52:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x700}}}}}}}}, &(0x7f0000000000)) 16:52:12 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000"], 0x24) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:12 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:12 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x4c) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1163.585531] input:  as /devices/virtual/input/input4086 16:52:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:12 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1163.654545] input:  as /devices/virtual/input/input4087 16:52:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xffffffffffffffff}}}}}}}}, &(0x7f0000000000)) 16:52:12 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000009ea00"}) 16:52:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1163.877645] input:  as /devices/virtual/input/input4088 16:52:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x300000000000000}}}}}}}}, &(0x7f0000000000)) [ 1163.938865] input:  as /devices/virtual/input/input4089 16:52:12 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000000000"], 0x27) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:12 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00H\x00'}) [ 1164.205328] input:  as /devices/virtual/input/input4090 [ 1164.235269] input:  as /devices/virtual/input/input4091 16:52:13 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x800000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:13 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00h\x00'}) 16:52:13 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000000100000000000000"], 0x28) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:13 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1164.557094] input:  as /devices/virtual/input/input4092 [ 1164.619191] input:  as /devices/virtual/input/input4093 16:52:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x1000000}}}}}}}}, &(0x7f0000000000)) 16:52:13 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x4c) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:13 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00'}) 16:52:13 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:13 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1164.872845] input:  as /devices/virtual/input/input4094 16:52:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x3c00}}}}}}}}, &(0x7f0000000000)) [ 1164.967626] input:  as /devices/virtual/input/input4095 16:52:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:13 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00z\x00'}) 16:52:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2f00000000000000}}}}}}}}, &(0x7f0000000000)) [ 1165.156168] input:  as /devices/virtual/input/input4096 16:52:13 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x0, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1165.263142] input:  as /devices/virtual/input/input4097 16:52:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00H\x00'}) 16:52:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2b00}}}}}}}}, &(0x7f0000000000)) 16:52:14 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2c00"}) 16:52:14 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:14 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1}}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1165.689106] input:  as /devices/virtual/input/input4098 [ 1165.729894] input:  as /devices/virtual/input/input4099 [ 1165.761362] input:  as /devices/virtual/input/input4100 16:52:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:14 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:14 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000409e0100"}) 16:52:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00H\x00'}) 16:52:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x7}}}}}}}}, &(0x7f0000000000)) 16:52:14 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000"], 0x1f) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:14 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1166.086696] input:  as /devices/virtual/input/input4101 [ 1166.098292] input:  as /devices/virtual/input/input4102 [ 1166.155486] input:  as /devices/virtual/input/input4103 16:52:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x60}}}}}}}}, &(0x7f0000000000)) 16:52:14 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:14 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000429e0100"}) [ 1166.412436] input:  as /devices/virtual/input/input4104 16:52:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2900000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1166.491776] input:  as /devices/virtual/input/input4105 16:52:15 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x58) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:15 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:15 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000003e9e0100"}) 16:52:15 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000"], 0x1f) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xb00000000000000}}}}}}}}, &(0x7f0000000000)) [ 1166.764164] input:  as /devices/virtual/input/input4106 [ 1166.822807] input:  as /devices/virtual/input/input4107 16:52:15 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x0, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x29}}}}}}}}, &(0x7f0000000000)) 16:52:15 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e3700"}) 16:52:15 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x58) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:15 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:15 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:15 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x58) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1167.223759] input:  as /devices/virtual/input/input4108 16:52:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1167.287041] input:  as /devices/virtual/input/input4109 16:52:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x3c00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:15 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000001000"}) 16:52:16 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:16 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x89ffffff00000000}}}}}}}}, &(0x7f0000000000)) [ 1167.567296] input:  as /devices/virtual/input/input4110 [ 1167.628800] input:  as /devices/virtual/input/input4111 16:52:16 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000000000ffffff9700"}) [ 1167.839900] input:  as /devices/virtual/input/input4112 [ 1167.897216] input:  as /devices/virtual/input/input4113 16:52:16 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x2) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r1 = userfaultfd(0x0) r2 = socket(0x18, 0x0, 0x0) connect(r2, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x13c0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="726177000000000000000000000040060000180000004988f9612a67a9f4cea5ff0000000000000000000000001e0000000000000000428e8aa6d8efcbbfcbe2a0df208ffc5e15477f1dd7d5d27b822104cf452e90e6c78fdd74ac8f317f529f7eb8b7362d2f53fe765012ed0c45e1049f5e88e22ceeb05755134ce6c4a1e6d24a7e801f73bbff4e7d4f7f729d492992c81a12389160b748033a"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x675, @empty, 0x100000000}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r4, 0x0) getpeername$packet(r4, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) r8 = msgget(0x3, 0x0) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000480)=""/32) ftruncate(r1, 0x9) sendfile(r4, r7, &(0x7f0000000240)=0x10, 0x2008000fffffffe) 16:52:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000"], 0x15) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2b000000}}}}}}}}, &(0x7f0000000000)) 16:52:16 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x2) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r1 = userfaultfd(0x0) r2 = socket(0x18, 0x0, 0x0) connect(r2, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x13c0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="726177000000000000000000000040060000180000004988f9612a67a9f4cea5ff0000000000000000000000001e0000000000000000428e8aa6d8efcbbfcbe2a0df208ffc5e15477f1dd7d5d27b822104cf452e90e6c78fdd74ac8f317f529f7eb8b7362d2f53fe765012ed0c45e1049f5e88e22ceeb05755134ce6c4a1e6d24a7e801f73bbff4e7d4f7f729d492992c81a12389160b748033a"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x675, @empty, 0x100000000}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r4, 0x0) getpeername$packet(r4, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) r8 = msgget(0x3, 0x0) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000480)=""/32) ftruncate(r1, 0x9) sendfile(r4, r7, &(0x7f0000000240)=0x10, 0x2008000fffffffe) 16:52:16 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x0, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:16 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00'}) 16:52:16 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1168.230897] input:  as /devices/virtual/input/input4114 [ 1168.275005] input:  as /devices/virtual/input/input4115 16:52:16 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x8}}}}}}}}, &(0x7f0000000000)) 16:52:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000"], 0x15) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:16 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00h\x00'}) 16:52:17 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x2) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r1 = userfaultfd(0x0) r2 = socket(0x18, 0x0, 0x0) connect(r2, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x13c0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="726177000000000000000000000040060000180000004988f9612a67a9f4cea5ff0000000000000000000000001e0000000000000000428e8aa6d8efcbbfcbe2a0df208ffc5e15477f1dd7d5d27b822104cf452e90e6c78fdd74ac8f317f529f7eb8b7362d2f53fe765012ed0c45e1049f5e88e22ceeb05755134ce6c4a1e6d24a7e801f73bbff4e7d4f7f729d492992c81a12389160b748033a"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x675, @empty, 0x100000000}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r4, 0x0) getpeername$packet(r4, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) r8 = msgget(0x3, 0x0) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000480)=""/32) ftruncate(r1, 0x9) sendfile(r4, r7, &(0x7f0000000240)=0x10, 0x2008000fffffffe) 16:52:17 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x7000000}}}}}}}}, &(0x7f0000000000)) 16:52:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000"], 0x15) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1168.545729] input:  as /devices/virtual/input/input4116 [ 1168.609227] input:  as /devices/virtual/input/input4117 16:52:17 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:17 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000259e0100"}) 16:52:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2f00}}}}}}}}, &(0x7f0000000000)) 16:52:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000"], 0x1f) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1168.825148] input:  as /devices/virtual/input/input4118 16:52:17 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1168.903147] input:  as /devices/virtual/input/input4119 16:52:17 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x58) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xffffff89}}}}}}}}, &(0x7f0000000000)) 16:52:17 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:17 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:17 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e4400"}) 16:52:17 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x4000000}}}}}}}}, &(0x7f0000000000)) 16:52:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000"], 0x1f) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1169.493711] input:  as /devices/virtual/input/input4120 16:52:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x44000000}}}}}}}}, &(0x7f0000000000)) 16:52:18 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000020c0)={'nat\x00', 0x0, 0x3, 0xa9, [], 0x5, &(0x7f0000001f80)=[{}, {}, {}, {}, {}], &(0x7f0000002000)=""/169}, &(0x7f0000000480)=0x78) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000"], 0x1f) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:18 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\a\x00'}) 16:52:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x5800}}}}}}}}, &(0x7f0000000000)) [ 1169.539774] input:  as /devices/virtual/input/input4121 [ 1169.758258] input:  as /devices/virtual/input/input4122 [ 1169.804385] input:  as /devices/virtual/input/input4123 16:52:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000"], 0x24) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:18 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[], &(0x7f0000000180)) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:18 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000500"}) [ 1170.004859] input:  as /devices/virtual/input/input4124 [ 1170.052202] input:  as /devices/virtual/input/input4125 16:52:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xfeffffff00000000}}}}}}}}, &(0x7f0000000000)) 16:52:18 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x0, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:18 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:18 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000"], 0x24) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:18 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e4700"}) 16:52:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x8000000}}}}}}}}, &(0x7f0000000000)) 16:52:18 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1170.427000] input:  as /devices/virtual/input/input4126 16:52:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000"], 0x24) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1170.498356] input:  as /devices/virtual/input/input4127 16:52:19 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x4400}}}}}}}}, &(0x7f0000000000)) 16:52:19 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e1d00"}) 16:52:19 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e6"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000000000"], 0x27) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:19 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1170.827407] input:  as /devices/virtual/input/input4128 [ 1170.904573] input:  as /devices/virtual/input/input4129 16:52:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x3c}}}}}}}}, &(0x7f0000000000)) 16:52:19 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(0xffffffffffffffff, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:19 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2200"}) [ 1171.151716] input:  as /devices/virtual/input/input4130 [ 1171.180235] input:  as /devices/virtual/input/input4131 16:52:19 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000000000"], 0x27) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:19 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fc"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:19 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) 16:52:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x3}}}}}}}}, &(0x7f0000000000)) 16:52:19 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000"], 0x24) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:19 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001fc0)=ANY=[@ANYBLOB="72617700000000000000000000004006000000000000000000ee5575bd00000018000000000000000000000000000002000000000000000000d1efcb4d148c40617217fa3c576d06e12300688f529156b97b6efd9ba7c4ef22026b94e29dab6d57d9de473b47c695c1d88bf5c86400175791206b78"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001f80)={0x4, &(0x7f0000000480)=[{0x0, 0x1b, 0x7, 0x345a00}, {0x3, 0x20, 0x1, 0x5}, {0x4, 0x80000001, 0x9, 0x9}, {0x4, 0xfffffffffffffe04, 0x0, 0x7fffffff}]}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1171.455468] input:  as /devices/virtual/input/input4132 [ 1171.508530] input:  as /devices/virtual/input/input4133 16:52:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f30501000b0006ca120423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:52:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c0000001000000000000"], 0x27) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x2b}}}}}}}}, &(0x7f0000000000)) 16:52:20 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2800"}) 16:52:20 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001fc0)=ANY=[@ANYBLOB="72617700000000000000000000004006000000000000000000ee5575bd00000018000000000000000000000000000002000000000000000000d1efcb4d148c40617217fa3c576d06e12300688f529156b97b6efd9ba7c4ef22026b94e29dab6d57d9de473b47c695c1d88bf5c86400175791206b78"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001f80)={0x4, &(0x7f0000000480)=[{0x0, 0x1b, 0x7, 0x345a00}, {0x3, 0x20, 0x1, 0x5}, {0x4, 0x80000001, 0x9, 0x9}, {0x4, 0xfffffffffffffe04, 0x0, 0x7fffffff}]}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1171.724168] input:  as /devices/virtual/input/input4134 16:52:20 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000000100000000000000"], 0x28) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1171.800496] input:  as /devices/virtual/input/input4135 16:52:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xb00}}}}}}}}, &(0x7f0000000000)) 16:52:20 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:20 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fc"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:20 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229c"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:20 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00'}) 16:52:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000000100000000000000"], 0x28) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0xb}}}}}}}}, &(0x7f0000000000)) 16:52:21 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1172.466696] input:  as /devices/virtual/input/input4136 [ 1172.520571] input:  as /devices/virtual/input/input4137 16:52:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x89ffffff}}}}}}}}, &(0x7f0000000000)) 16:52:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f30501000b00060f000423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:52:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c000000100000000000000"], 0x28) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:21 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}) 16:52:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x8}}}}}}}}, &(0x7f0000000000)) [ 1172.757150] input:  as /devices/virtual/input/input4138 16:52:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000003e9e0100"}) [ 1172.826422] input:  as /devices/virtual/input/input4139 16:52:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:21 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1172.982598] input:  as /devices/virtual/input/input4140 16:52:21 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2d00"}) 16:52:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f30501000b020000000423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:52:21 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x4}}}}}}}}, &(0x7f0000000000)) 16:52:21 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1173.111217] input:  as /devices/virtual/input/input4141 [ 1173.198294] input:  as /devices/virtual/input/input4142 [ 1173.244237] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. 16:52:21 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3000"}) [ 1173.387214] input:  as /devices/virtual/input/input4143 [ 1173.459729] input:  as /devices/virtual/input/input4144 16:52:22 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x5}}}}}}}}, &(0x7f0000000000)) 16:52:22 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000180000004988f94a3a0b822a67a9f4cee5ff00000000000000000000000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000001f80)={0xa64, 0xff, 0x80000000}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:22 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:22 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:22 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(0xffffffffffffffff, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:22 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000459e0100"}) [ 1173.690604] input:  as /devices/virtual/input/input4145 [ 1173.734483] input:  as /devices/virtual/input/input4146 16:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x3}}}}}}}}, &(0x7f0000000000)) 16:52:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:22 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(0xffffffffffffffff, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:22 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000200"}) 16:52:22 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0xf}}}}}}}}, &(0x7f0000000000)) 16:52:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1174.028602] input:  as /devices/virtual/input/input4147 16:52:22 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1174.109143] input:  as /devices/virtual/input/input4148 16:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0xa}}}}}}}}, &(0x7f0000000000)) 16:52:22 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) 16:52:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 1174.345761] input:  as /devices/virtual/input/input4149 [ 1174.379774] input:  as /devices/virtual/input/input4150 16:52:23 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0xc}}}}}}}}, &(0x7f0000000000)) 16:52:23 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:23 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:23 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(0xffffffffffffffff, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:23 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2200"}) 16:52:23 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x10}}}}}}}}, &(0x7f0000000000)) [ 1174.732602] input:  as /devices/virtual/input/input4151 [ 1174.764037] input:  as /devices/virtual/input/input4152 16:52:23 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2500"}) 16:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x6}}}}}}}}, &(0x7f0000000000)) 16:52:23 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(0xffffffffffffffff, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f305010006000600000423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:52:23 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1174.998640] input:  as /devices/virtual/input/input4153 16:52:23 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1175.116854] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 1175.119708] input:  as /devices/virtual/input/input4154 16:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2b000000}}}}}}}}, &(0x7f0000000000)) 16:52:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:52:23 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000fdfdffff00"}) 16:52:23 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(0xffffffffffffffff, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1175.339386] input:  as /devices/virtual/input/input4155 [ 1175.389597] input:  as /devices/virtual/input/input4156 16:52:24 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2b00}}}}}}}}, &(0x7f0000000000)) 16:52:24 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2100"}) 16:52:24 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f305010020000600000423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:52:24 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000302fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) [ 1175.699144] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 1175.724599] input:  as /devices/virtual/input/input4157 16:52:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000302fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1175.775414] input:  as /devices/virtual/input/input4158 16:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x800000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000000302fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) 16:52:24 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e4600"}) 16:52:24 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:24 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1176.025001] input:  as /devices/virtual/input/input4159 [ 1176.063240] input:  as /devices/virtual/input/input4160 16:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x700000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:24 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040), 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:24 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r0, 0x0) getpeername$packet(r1, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r6, 0x280080) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r1, r6, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:24 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00`\x00'}) 16:52:24 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000b54100000000000000eb0000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000d3c608cefa77e9074d3a55619d303e16b498414fa82359c422eb3fb44df851ed83da65b9606692624fcd3f31df2b5a5c1a095154a9b89c2ee6d14de58f66fbc6377d37"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000440)={0x4, 0x4, 0x3a7, 0x3, 0x1}) ftruncate(r1, 0x0) getpeername$packet(r5, &(0x7f00000001c0), &(0x7f0000000140)=0xffffffffffffffd7) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r6, 0x280080) migrate_pages(r4, 0x30e6, &(0x7f0000000480)=0xffffffff, &(0x7f00000004c0)=0x108d48da) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r6, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:24 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1176.324198] input:  as /devices/virtual/input/input4161 16:52:24 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfeffffff00000000}}}}}}}}, &(0x7f0000000000)) [ 1176.371520] input:  as /devices/virtual/input/input4162 16:52:25 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2f00"}) 16:52:25 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x300000000000000}}}}}}}}, &(0x7f0000000000)) [ 1176.687874] input:  as /devices/virtual/input/input4163 [ 1176.749891] input:  as /devices/virtual/input/input4164 16:52:25 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000000f00"}) 16:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3c00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:25 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1177.001142] input:  as /devices/virtual/input/input4165 [ 1177.045303] input:  as /devices/virtual/input/input4166 16:52:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) poll(&(0x7f00000001c0)=[{r0, 0x4081}, {r0, 0x520}, {r0, 0x4208}], 0x3, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x111000}) 16:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3000000}}}}}}}}, &(0x7f0000000000)) 16:52:25 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:25 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000002080)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180001004988f94a3a0b612a67a9f4cea5ff00000000000000168f58d7f4c5ea3926f05678fba217c593ffc8a194e77dd95115e51bd08ceaf96e828a23c1d678dff4fcc0e918efe599468f0590ddb59f885a2067466be2d4379de70ac305005d7ce2ee573773409fa3eabeb396c822b7c257df7152dce3df"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000001f80)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000001fc0)={0x0, 0x10003, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000480)={0x6, 0x40, 0x43, 0x100000000}, 0x10) ftruncate(r4, 0x280080) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r4, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:25 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:25 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 16:52:25 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:25 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1177.375503] vhci_hcd: invalid port number 148 [ 1177.380120] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1177.415276] input:  as /devices/virtual/input/input4167 16:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x6}}}}}}}}, &(0x7f0000000000)) [ 1177.464749] input:  as /devices/virtual/input/input4168 16:52:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) poll(&(0x7f00000001c0)=[{r0, 0x4081}, {r0, 0x520}, {r0, 0x4208}], 0x3, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x111000}) 16:52:26 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000000200"}) 16:52:26 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1177.645549] vhci_hcd: invalid port number 148 [ 1177.650226] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x60}}}}}}}}, &(0x7f0000000000)) [ 1177.699151] input:  as /devices/virtual/input/input4169 16:52:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) poll(&(0x7f00000001c0)=[{r0, 0x4081}, {r0, 0x520}, {r0, 0x4208}], 0x3, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x111000}) [ 1177.771937] input:  as /devices/virtual/input/input4170 16:52:26 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:26 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00?\x00'}) 16:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x6000000000000000}}}}}}}}, &(0x7f0000000000)) [ 1177.934653] vhci_hcd: invalid port number 148 [ 1177.939358] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1178.013115] input:  as /devices/virtual/input/input4171 16:52:26 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1178.076821] input:  as /devices/virtual/input/input4172 16:52:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00?\x00'}) 16:52:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) poll(&(0x7f00000001c0)=[{r0, 0x4081}, {r0, 0x520}, {r0, 0x4208}], 0x3, 0x1) 16:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2c}}}}}}}}, &(0x7f0000000000)) 16:52:26 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:26 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:26 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000872000"}) 16:52:26 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1178.372092] vhci_hcd: invalid port number 148 [ 1178.376728] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1178.399329] input:  as /devices/virtual/input/input4173 16:52:27 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1178.437293] input:  as /devices/virtual/input/input4175 [ 1178.452272] input:  as /devices/virtual/input/input4174 16:52:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4000000}}}}}}}}, &(0x7f0000000000)) 16:52:27 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000001000"}) 16:52:27 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1178.629229] vhci_hcd: invalid port number 148 [ 1178.633899] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1178.686190] input:  as /devices/virtual/input/input4176 16:52:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, &(0x7f0000000000)) [ 1178.744482] input:  as /devices/virtual/input/input4177 16:52:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:27 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2c00"}) [ 1178.882833] vhci_hcd: invalid port number 148 [ 1178.887512] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2b}}}}}}}}, &(0x7f0000000000)) [ 1178.954775] input:  as /devices/virtual/input/input4178 16:52:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:27 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:27 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1179.047802] input:  as /devices/virtual/input/input4179 [ 1179.158541] vhci_hcd: invalid port number 148 [ 1179.163225] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:27 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1179.200019] vhci_hcd: invalid port number 148 [ 1179.204701] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:27 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0x0, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:27 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:27 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2900"}) 16:52:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:27 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:27 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1179.485941] vhci_hcd: invalid port number 148 [ 1179.490610] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1179.500969] vhci_hcd: invalid port number 148 [ 1179.505669] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1179.526213] input:  as /devices/virtual/input/input4180 16:52:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x7000000}}}}}}}}, &(0x7f0000000000)) 16:52:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) [ 1179.590239] input:  as /devices/virtual/input/input4181 16:52:28 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e3900"}) [ 1179.709023] vhci_hcd: invalid port number 148 [ 1179.713654] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1179.736534] vhci_hcd: invalid port number 148 [ 1179.741179] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:28 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x300}}}}}}}}, &(0x7f0000000000)) 16:52:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1179.881038] input:  as /devices/virtual/input/input4182 [ 1179.943685] input:  as /devices/virtual/input/input4183 [ 1179.953605] vhci_hcd: invalid port number 148 [ 1179.958403] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1179.975344] vhci_hcd: invalid port number 148 [ 1179.979929] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:28 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:28 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0x0, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:28 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2f00}}}}}}}}, &(0x7f0000000000)) 16:52:28 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000ffffff9700"}) 16:52:28 executing program 0: ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1180.318460] vhci_hcd: invalid port number 148 [ 1180.323119] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1180.338300] input:  as /devices/virtual/input/input4184 [ 1180.371330] input:  as /devices/virtual/input/input4185 16:52:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x6d436fe7) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb}}}}}}}}, &(0x7f0000000000)) 16:52:29 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00l\x00'}) [ 1180.524876] vhci_hcd: invalid port number 148 [ 1180.529599] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:29 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x0, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1180.587702] input:  as /devices/virtual/input/input4186 16:52:29 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:29 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) [ 1180.672701] input:  as /devices/virtual/input/input4187 [ 1180.758499] vhci_hcd: invalid port number 148 [ 1180.763152] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:29 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x44}}}}}}}}, &(0x7f0000000000)) 16:52:29 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:29 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2a00"}) 16:52:29 executing program 5: ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:29 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:29 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1181.089258] input:  as /devices/virtual/input/input4188 16:52:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[]) 16:52:29 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) [ 1181.133125] input:  as /devices/virtual/input/input4189 16:52:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x44000000}}}}}}}}, &(0x7f0000000000)) 16:52:29 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000000400"}) 16:52:29 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x0, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:29 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB]) [ 1181.371223] input:  as /devices/virtual/input/input4190 16:52:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2c000000}}}}}}}}, &(0x7f0000000000)) [ 1181.432233] input:  as /devices/virtual/input/input4191 16:52:30 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0), 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:30 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000000000000000000000000000"]) 16:52:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) 16:52:30 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000001f00"}) 16:52:30 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0), 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:30 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x600}}}}}}}}, &(0x7f0000000000)) 16:52:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000570102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:52:30 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40), 0x0, 0x0, 0xfffffffffffffffa) [ 1181.894810] input:  as /devices/virtual/input/input4192 16:52:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/106) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xef, 0x96b1, 0x7c3, 0x8, 0x6, 0xff, 0x5, 0x6}, &(0x7f0000000140)={0x100000001, 0xfffffffffffff001, 0x6, 0x78c, 0x100, 0x5, 0x1, 0x14}, &(0x7f0000000180)={0x1, 0x9, 0x100000000, 0xff, 0x14, 0x3a, 0x5, 0xfffffffffffff833}, &(0x7f0000000200)={r1, r2+30000000}, &(0x7f0000000280)={&(0x7f0000000240)={0xffffffffffffff7f}, 0x8}) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x8}]}) 16:52:30 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[]) 16:52:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2900}}}}}}}}, &(0x7f0000000000)) 16:52:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000000000000004170000800000000000000"]) [ 1181.935673] input:  as /devices/virtual/input/input4193 16:52:30 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2e00"}) 16:52:30 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB]) [ 1182.093943] vhci_hcd: invalid port number 148 [ 1182.098562] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) 16:52:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x400000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) [ 1182.237412] input:  as /devices/virtual/input/input4194 [ 1182.249662] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 16:52:30 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40), 0x0, 0x0, 0xfffffffffffffffa) [ 1182.296155] input:  as /devices/virtual/input/input4195 16:52:31 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r6, 0x280080) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r6, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:31 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) 16:52:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) 16:52:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000"]) 16:52:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2900000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:31 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:31 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3300"}) 16:52:31 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1182.769827] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1182.775549] input:  as /devices/virtual/input/input4196 [ 1182.777226] vhci_hcd: invalid port number 148 [ 1182.786357] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:31 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000000000000004170000800000000000000"]) [ 1182.829272] input:  as /devices/virtual/input/input4197 16:52:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x1000000}}}}}}}}, &(0x7f0000000000)) 16:52:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) 16:52:31 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000500"}) 16:52:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) [ 1183.004986] vhci_hcd: invalid port number 148 [ 1183.009652] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1183.026886] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1183.030257] input:  as /devices/virtual/input/input4198 16:52:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000000000000004170000800"]) 16:52:31 executing program 1: ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) 16:52:31 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) [ 1183.115490] input:  as /devices/virtual/input/input4199 [ 1183.187936] vhci_hcd: invalid port number 148 [ 1183.192595] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:32 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xffffffff00000000}}}}}}}}, &(0x7f0000000000)) 16:52:32 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\n\x00'}) 16:52:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) 16:52:32 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008000000"]) 16:52:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) 16:52:32 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:32 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x8}]}) 16:52:32 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1183.696707] vhci_hcd: invalid port number 148 [ 1183.701340] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1183.710365] input:  as /devices/virtual/input/input4200 16:52:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) [ 1183.748168] input:  as /devices/virtual/input/input4201 16:52:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x60000000}}}}}}}}, &(0x7f0000000000)) 16:52:32 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) [ 1183.830179] vhci_hcd: invalid port number 71 [ 1183.834708] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 16:52:32 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000400"}) [ 1183.881538] vhci_hcd: invalid port number 148 [ 1183.886157] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:32 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:32 executing program 1: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb22339c24a8fde6e6c371e1e1a0d0d891346793ea950708ee53a83caac2440dc76fdcf7a1ecf3b65fe84fb2ea1c8a0849d00000000000000000000000000000000000000000000000"]) [ 1183.980413] input:  as /devices/virtual/input/input4202 [ 1184.035931] input:  as /devices/virtual/input/input4203 [ 1184.055902] vhci_hcd: invalid port number 71 [ 1184.060491] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 16:52:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x600000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:33 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000480)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x0, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[]) 16:52:33 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:33 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000000100"}) 16:52:33 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) 16:52:33 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000000000000004170000800"]) 16:52:33 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1184.567257] vhci_hcd: invalid port number 148 [ 1184.571900] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1184.586153] input:  as /devices/virtual/input/input4204 [ 1184.593486] vhci_hcd: invalid port number 71 [ 1184.598038] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 16:52:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB]) [ 1184.616160] input:  as /devices/virtual/input/input4205 16:52:33 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2f00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:33 executing program 7: ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:33 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) 16:52:33 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000000500"}) 16:52:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e702698db6b224529fec7d14072d2c14466dfe31d771a9fe2fe5b482c5240cce33eaca263e29eb"]) 16:52:33 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1184.881490] input:  as /devices/virtual/input/input4206 [ 1184.918576] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 16:52:33 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1184.935874] input:  as /devices/virtual/input/input4207 [ 1185.029979] vhci_hcd: invalid port number 148 [ 1185.034655] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:33 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x1000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:33 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:33 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000309e0100"}) 16:52:33 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000000000417000"]) 16:52:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="02"]) 16:52:33 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:33 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:34 executing program 7: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1185.466346] input:  as /devices/virtual/input/input4208 16:52:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008005228133b8e2435920000000000006cc8e70269"]) 16:52:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f00008d0102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) [ 1185.525607] input:  as /devices/virtual/input/input4209 16:52:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3c00}}}}}}}}, &(0x7f0000000000)) 16:52:34 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2000"}) [ 1185.620706] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 16:52:34 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)) 16:52:34 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x8}]}) 16:52:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="02"]) [ 1185.780616] input:  as /devices/virtual/input/input4210 [ 1185.819836] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 1185.834817] input:  as /devices/virtual/input/input4211 16:52:34 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:34 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x0, 0x7ff0bdbe}]}) 16:52:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000000000000408900080052"]) 16:52:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4}}}}}}}}, &(0x7f0000000000)) 16:52:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000000)="1f0000d70002fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) 16:52:34 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000fffffffd00"}) 16:52:34 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:34 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1186.359510] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1186.373026] FAULT_INJECTION: forcing a failure. [ 1186.373026] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.384341] CPU: 0 PID: 30706 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 1186.391712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.401072] Call Trace: [ 1186.403678] dump_stack+0x1c9/0x2b4 [ 1186.407324] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1186.412526] ? graph_lock+0x170/0x170 [ 1186.414851] input:  as /devices/virtual/input/input4212 [ 1186.416349] should_fail.cold.4+0xa/0x11 [ 1186.416374] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1186.416394] ? find_held_lock+0x36/0x1c0 [ 1186.435051] ? graph_lock+0x170/0x170 [ 1186.438864] ? mark_held_locks+0x160/0x160 [ 1186.443141] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1186.448264] ? find_held_lock+0x36/0x1c0 [ 1186.452345] ? __lock_is_held+0xb5/0x140 [ 1186.456431] ? check_same_owner+0x340/0x340 [ 1186.460789] ? rcu_note_context_switch+0x680/0x680 [ 1186.465730] ? __lock_acquire+0x7fc/0x5020 [ 1186.469979] ? rcu_note_context_switch+0x680/0x680 [ 1186.474939] __should_failslab+0x124/0x180 [ 1186.479203] should_failslab+0x9/0x14 [ 1186.483018] kmem_cache_alloc_trace+0x2b5/0x730 [ 1186.487704] ? mark_held_locks+0x160/0x160 [ 1186.491967] proc_do_submiturb+0xf37/0x3d70 [ 1186.496320] ? check_same_owner+0x310/0x340 [ 1186.500658] ? free_async+0x490/0x490 [ 1186.504486] ? print_usage_bug+0xc0/0xc0 [ 1186.508573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1186.514122] ? _copy_from_user+0xdf/0x150 [ 1186.518284] proc_submiturb_compat+0x544/0x800 [ 1186.522886] ? proc_do_submiturb+0x3d70/0x3d70 [ 1186.527535] usbdev_do_ioctl+0x19a5/0x3b30 [ 1186.531812] ? processcompl_compat+0x680/0x680 [ 1186.536447] ? mark_held_locks+0x160/0x160 [ 1186.540703] ? print_usage_bug+0xc0/0xc0 [ 1186.541250] FAULT_INJECTION: forcing a failure. [ 1186.541250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1186.544774] ? __lock_acquire+0x7fc/0x5020 [ 1186.544793] ? graph_lock+0x170/0x170 [ 1186.544809] ? graph_lock+0x170/0x170 [ 1186.544826] ? graph_lock+0x170/0x170 [ 1186.544852] ? find_held_lock+0x36/0x1c0 [ 1186.544870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.544886] ? _parse_integer+0x13b/0x190 [ 1186.544902] ? graph_lock+0x170/0x170 [ 1186.544915] ? graph_lock+0x170/0x170 [ 1186.544930] ? _parse_integer+0x190/0x190 [ 1186.544956] ? graph_lock+0x170/0x170 [ 1186.544971] ? lock_release+0x9f0/0x9f0 [ 1186.605827] ? find_held_lock+0x36/0x1c0 [ 1186.609939] ? lock_downgrade+0x8f0/0x8f0 [ 1186.614100] ? kasan_check_read+0x11/0x20 [ 1186.618257] ? rcu_is_watching+0x8c/0x150 [ 1186.622413] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1186.627119] ? __fget+0x4d5/0x740 [ 1186.630589] ? ksys_dup3+0x690/0x690 [ 1186.634312] ? find_held_lock+0x36/0x1c0 [ 1186.638399] ? kasan_check_write+0x14/0x20 [ 1186.642649] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1186.647590] usbdev_ioctl+0x25/0x30 [ 1186.651231] ? usbdev_compat_ioctl+0x30/0x30 [ 1186.655664] do_vfs_ioctl+0x1de/0x1720 [ 1186.659558] ? __lock_is_held+0xb5/0x140 [ 1186.663724] ? ioctl_preallocate+0x300/0x300 [ 1186.668139] ? __fget_light+0x2f7/0x440 [ 1186.672120] ? fget_raw+0x20/0x20 [ 1186.675583] ? __sb_end_write+0xac/0xe0 [ 1186.679582] ? fput+0x130/0x1a0 [ 1186.682882] ? do_syscall_64+0x9a/0x820 [ 1186.686863] ? do_syscall_64+0x9a/0x820 [ 1186.690851] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1186.695467] ? security_file_ioctl+0x94/0xc0 [ 1186.699889] ksys_ioctl+0xa9/0xd0 [ 1186.703382] __x64_sys_ioctl+0x73/0xb0 [ 1186.707289] do_syscall_64+0x1b9/0x820 [ 1186.711202] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1186.716590] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1186.721534] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1186.726562] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1186.731590] ? recalc_sigpending_tsk+0x180/0x180 [ 1186.736364] ? kasan_check_write+0x14/0x20 [ 1186.740625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1186.745492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.750691] RIP: 0033:0x457089 [ 1186.753906] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1186.772823] RSP: 002b:00007fac38a3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.780538] RAX: ffffffffffffffda RBX: 00007fac38a3d6d4 RCX: 0000000000457089 [ 1186.787811] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 1186.795081] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.802353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 16:52:34 executing program 5 (fault-call:13 fault-nth:0): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1186.809624] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000000 [ 1186.816928] CPU: 1 PID: 30715 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #215 [ 1186.824309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.833670] Call Trace: [ 1186.836283] dump_stack+0x1c9/0x2b4 [ 1186.839938] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1186.845149] ? print_usage_bug+0xc0/0xc0 [ 1186.849247] should_fail.cold.4+0xa/0x11 [ 1186.853324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1186.858464] ? graph_lock+0x170/0x170 [ 1186.862281] ? mark_held_locks+0xc9/0x160 [ 1186.866450] ? graph_lock+0x170/0x170 [ 1186.870265] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1186.875056] ? find_held_lock+0x36/0x1c0 [ 1186.879132] ? __lock_is_held+0xb5/0x140 [ 1186.883231] ? check_same_owner+0x340/0x340 [ 1186.887568] ? retint_kernel+0x10/0x10 [ 1186.891485] ? rcu_note_context_switch+0x680/0x680 [ 1186.896434] __alloc_pages_nodemask+0x365/0xd10 [ 1186.901126] ? __lock_acquire+0x7fc/0x5020 [ 1186.905375] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 16:52:35 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000}]}) [ 1186.910405] ? __lock_acquire+0x7fc/0x5020 [ 1186.914659] ? __lock_acquire+0x7fc/0x5020 [ 1186.918907] ? mark_held_locks+0x160/0x160 [ 1186.923159] ? print_usage_bug+0xc0/0xc0 [ 1186.927235] ? mark_held_locks+0x160/0x160 [ 1186.931490] ? _raw_spin_unlock_irq+0x56/0x70 [ 1186.935998] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1186.941554] alloc_pages_current+0x10c/0x210 [ 1186.945983] __page_cache_alloc+0x398/0x5e0 [ 1186.950321] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1186.955093] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1186.959686] ? unaccount_page_cache_page+0xd30/0xd30 [ 1186.964803] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 1186.969739] ? graph_lock+0x170/0x170 [ 1186.973560] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1186.978331] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1186.983799] pagecache_get_page+0x3a1/0xe40 [ 1186.988142] ? find_get_pages_contig+0x1650/0x1650 [ 1186.993084] ? retint_kernel+0x10/0x10 [ 1186.997001] ? lock_release+0x4f5/0x9f0 [ 1187.000997] ? lock_downgrade+0x8f0/0x8f0 [ 1187.005168] ? kasan_check_read+0x11/0x20 [ 1187.009339] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1187.009357] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1187.009376] ? kasan_check_write+0x14/0x20 [ 1187.009392] ? do_raw_spin_lock+0xc1/0x200 [ 1187.009411] ? _raw_spin_unlock+0x22/0x30 [ 1187.009428] ? fuse_write_update_size+0x138/0x190 [ 1187.009460] fuse_dev_do_write+0xb2b/0x3700 [ 1187.009472] ? __lock_acquire+0x7fc/0x5020 [ 1187.009493] ? __lock_acquire+0x7fc/0x5020 [ 1187.048766] ? fuse_dev_read+0x250/0x250 [ 1187.052841] ? mark_held_locks+0x160/0x160 [ 1187.057095] ? mark_held_locks+0x160/0x160 [ 1187.061339] ? __lock_acquire+0x7fc/0x5020 [ 1187.065585] ? print_usage_bug+0xc0/0xc0 [ 1187.069658] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1187.074352] ? mark_held_locks+0x160/0x160 [ 1187.078614] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1187.083203] ? retint_kernel+0x10/0x10 [ 1187.087111] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 1187.092048] ? print_usage_bug+0xc0/0xc0 [ 1187.096130] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1187.101590] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1187.106183] ? retint_kernel+0x10/0x10 16:52:35 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1187.110084] ? graph_lock+0x170/0x170 [ 1187.113901] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1187.118660] ? graph_lock+0x170/0x170 [ 1187.122493] ? find_held_lock+0x36/0x1c0 [ 1187.126577] ? lock_downgrade+0x8f0/0x8f0 [ 1187.130745] ? kasan_check_read+0x11/0x20 [ 1187.134909] ? rcu_is_watching+0x8c/0x150 [ 1187.139099] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1187.143796] ? aa_file_perm+0x498/0xfc0 [ 1187.147783] ? check_memory_region+0x1c/0x1b0 [ 1187.152312] ? memset+0x31/0x40 [ 1187.155610] fuse_dev_write+0x19a/0x240 16:52:35 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1187.159619] ? fuse_dev_splice_write+0xe70/0xe70 [ 1187.164391] ? proc_fail_nth_write+0x9e/0x210 [ 1187.168890] ? proc_cwd_link+0x1d0/0x1d0 [ 1187.172979] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1187.178546] ? iov_iter_init+0xc9/0x1f0 [ 1187.182533] __vfs_write+0x6af/0x9d0 [ 1187.186269] ? kernel_read+0x120/0x120 [ 1187.190175] ? apparmor_capget+0xfa0/0xfa0 [ 1187.194449] ? apparmor_file_permission+0x24/0x30 [ 1187.199315] ? rw_verify_area+0x118/0x360 [ 1187.203486] vfs_write+0x1fc/0x560 [ 1187.207047] ksys_write+0x101/0x260 16:52:35 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1187.210691] ? __ia32_sys_read+0xb0/0xb0 [ 1187.214773] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1187.219909] __x64_sys_write+0x73/0xb0 [ 1187.223815] do_syscall_64+0x1b9/0x820 [ 1187.227714] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1187.233098] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1187.238039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1187.242894] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1187.247929] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1187.252979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1187.257843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.263041] RIP: 0033:0x457089 [ 1187.266246] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1187.285160] RSP: 002b:00007ff9ddbf7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.292884] RAX: ffffffffffffffda RBX: 00007ff9ddbf86d4 RCX: 0000000000457089 [ 1187.300152] RDX: 0000000000000029 RSI: 0000000020000080 RDI: 0000000000000008 16:52:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="02"]) [ 1187.307419] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.314697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1187.321977] R13: 00000000004d7450 R14: 00000000004ca544 R15: 0000000000000000 [ 1187.364209] vhci_hcd: invalid port number 148 [ 1187.369098] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:35 executing program 7 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:35 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000208700"}) [ 1187.412282] FAULT_INJECTION: forcing a failure. [ 1187.412282] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.423660] CPU: 1 PID: 30737 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 1187.431033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.440419] Call Trace: [ 1187.443039] dump_stack+0x1c9/0x2b4 [ 1187.446692] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1187.451895] ? __kernel_text_address+0xd/0x40 [ 1187.456404] ? unwind_get_return_address+0x61/0xa0 16:52:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x7}}}}}}}}, &(0x7f0000000000)) [ 1187.461392] should_fail.cold.4+0xa/0x11 [ 1187.465488] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1187.470625] ? save_stack+0x43/0xd0 [ 1187.474268] ? kasan_kmalloc+0xc4/0xe0 [ 1187.478172] ? kmem_cache_alloc_trace+0x152/0x730 [ 1187.483031] ? proc_do_submiturb+0xf37/0x3d70 [ 1187.487762] ? graph_lock+0x170/0x170 [ 1187.491579] ? do_syscall_64+0x1b9/0x820 [ 1187.495674] ? graph_lock+0x170/0x170 [ 1187.499508] ? find_held_lock+0x36/0x1c0 [ 1187.503593] ? __lock_is_held+0xb5/0x140 [ 1187.504650] input:  as /devices/virtual/input/input4214 [ 1187.507684] ? check_same_owner+0x340/0x340 [ 1187.507702] ? lock_release+0x9f0/0x9f0 [ 1187.507728] ? rcu_note_context_switch+0x680/0x680 [ 1187.507753] __should_failslab+0x124/0x180 [ 1187.507781] should_failslab+0x9/0x14 [ 1187.524264] input:  as /devices/virtual/input/input4215 [ 1187.526463] kmem_cache_alloc_trace+0x2b5/0x730 [ 1187.526482] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1187.526503] ? check_ctrlrecip+0xa9/0x320 [ 1187.526531] ? _copy_from_user+0xdf/0x150 [ 1187.526551] proc_do_submiturb+0x4f6/0x3d70 [ 1187.526584] ? check_same_owner+0x324/0x340 [ 1187.526600] ? free_async+0x490/0x490 [ 1187.526620] ? print_usage_bug+0xc0/0xc0 [ 1187.574708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1187.580270] ? _copy_from_user+0xdf/0x150 [ 1187.584456] proc_submiturb_compat+0x544/0x800 [ 1187.589052] ? proc_do_submiturb+0x3d70/0x3d70 [ 1187.594184] usbdev_do_ioctl+0x19a5/0x3b30 [ 1187.598470] ? processcompl_compat+0x680/0x680 [ 1187.603106] ? mark_held_locks+0x160/0x160 [ 1187.607356] ? print_usage_bug+0xc0/0xc0 16:52:36 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1187.611428] ? __lock_acquire+0x7fc/0x5020 [ 1187.615697] ? graph_lock+0x170/0x170 [ 1187.619518] ? graph_lock+0x170/0x170 [ 1187.623333] ? graph_lock+0x170/0x170 [ 1187.627159] ? find_held_lock+0x36/0x1c0 [ 1187.631244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.636808] ? _parse_integer+0x13b/0x190 [ 1187.640978] ? graph_lock+0x170/0x170 [ 1187.644798] ? graph_lock+0x170/0x170 [ 1187.648618] ? _parse_integer+0x190/0x190 [ 1187.652784] ? graph_lock+0x170/0x170 [ 1187.656623] ? lock_release+0x9f0/0x9f0 [ 1187.660627] ? find_held_lock+0x36/0x1c0 [ 1187.664712] ? lock_downgrade+0x8f0/0x8f0 [ 1187.668877] ? kasan_check_read+0x11/0x20 [ 1187.673039] ? rcu_is_watching+0x8c/0x150 [ 1187.677201] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1187.681907] ? __fget+0x4d5/0x740 [ 1187.685409] ? ksys_dup3+0x690/0x690 [ 1187.689143] ? find_held_lock+0x36/0x1c0 [ 1187.693230] ? kasan_check_write+0x14/0x20 [ 1187.697500] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1187.702456] usbdev_ioctl+0x25/0x30 [ 1187.706110] ? usbdev_compat_ioctl+0x30/0x30 [ 1187.710538] do_vfs_ioctl+0x1de/0x1720 [ 1187.714433] ? __lock_is_held+0xb5/0x140 [ 1187.718565] ? ioctl_preallocate+0x300/0x300 [ 1187.722993] ? __fget_light+0x2f7/0x440 [ 1187.726986] ? fget_raw+0x20/0x20 [ 1187.730469] ? __sb_end_write+0xac/0xe0 [ 1187.734485] ? fput+0x130/0x1a0 [ 1187.737787] ? do_syscall_64+0x9a/0x820 [ 1187.741772] ? do_syscall_64+0x9a/0x820 [ 1187.745760] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1187.750362] ? security_file_ioctl+0x94/0xc0 [ 1187.754785] ksys_ioctl+0xa9/0xd0 [ 1187.758259] __x64_sys_ioctl+0x73/0xb0 [ 1187.762161] do_syscall_64+0x1b9/0x820 [ 1187.766067] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1187.771465] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1187.776409] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1187.781459] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1187.786492] ? recalc_sigpending_tsk+0x180/0x180 [ 1187.791260] ? kasan_check_write+0x14/0x20 [ 1187.795515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1187.800379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.805576] RIP: 0033:0x457089 [ 1187.808778] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1187.827684] RSP: 002b:00007fac38a3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.835403] RAX: ffffffffffffffda RBX: 00007fac38a3d6d4 RCX: 0000000000457089 [ 1187.842695] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 1187.849975] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.857261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 16:52:36 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1187.864538] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000001 16:52:36 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:36 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e4700"}) 16:52:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000000"]) 16:52:36 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045505, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x5800}}}}}}}}, &(0x7f0000000000)) 16:52:36 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1188.058998] vhci_hcd: invalid port number 71 [ 1188.063588] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 [ 1188.075628] input:  as /devices/virtual/input/input4216 [ 1188.086247] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor3' sets config #2 [ 1188.138859] FAULT_INJECTION: forcing a failure. [ 1188.138859] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.150221] CPU: 0 PID: 30780 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 1188.157600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.166969] Call Trace: [ 1188.169595] dump_stack+0x1c9/0x2b4 [ 1188.173270] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1188.178494] ? kernel_text_address+0x79/0xf0 [ 1188.182930] should_fail.cold.4+0xa/0x11 [ 1188.187032] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1188.192177] ? save_stack+0xa9/0xd0 [ 1188.195825] ? save_stack+0x43/0xd0 [ 1188.199493] ? graph_lock+0x170/0x170 [ 1188.203315] ? usbdev_do_ioctl+0x19a5/0x3b30 [ 1188.207740] ? usbdev_ioctl+0x25/0x30 [ 1188.211566] ? do_vfs_ioctl+0x1de/0x1720 [ 1188.215646] ? ksys_ioctl+0xa9/0xd0 [ 1188.219294] ? __x64_sys_ioctl+0x73/0xb0 [ 1188.223383] ? find_held_lock+0x36/0x1c0 [ 1188.227490] ? __lock_is_held+0xb5/0x140 [ 1188.231593] ? check_same_owner+0x340/0x340 [ 1188.235960] ? rcu_note_context_switch+0x680/0x680 [ 1188.240925] __should_failslab+0x124/0x180 [ 1188.245190] should_failslab+0x9/0x14 [ 1188.249018] __kmalloc+0x2b2/0x720 [ 1188.252586] ? rcu_read_lock_sched_held+0x108/0x120 [ 1188.257648] ? kmem_cache_alloc_trace+0x324/0x730 [ 1188.262519] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1188.267740] ? usb_alloc_urb+0x24/0x50 [ 1188.271663] usb_alloc_urb+0x24/0x50 [ 1188.275408] proc_do_submiturb+0x51e/0x3d70 [ 1188.279800] ? free_async+0x490/0x490 [ 1188.283642] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 16:52:36 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="a900002004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1188.289270] ? _copy_from_user+0xdf/0x150 [ 1188.293459] proc_submiturb_compat+0x544/0x800 [ 1188.293483] ? proc_do_submiturb+0x3d70/0x3d70 [ 1188.293526] usbdev_do_ioctl+0x19a5/0x3b30 [ 1188.306909] ? processcompl_compat+0x680/0x680 [ 1188.311513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.317059] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 1188.322462] ? mark_held_locks+0x160/0x160 [ 1188.326709] ? perf_event_update_userpage+0xd30/0xd30 [ 1188.331924] ? graph_lock+0x170/0x170 16:52:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000000000000004089"]) 16:52:36 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:36 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045510, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1188.335756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.341322] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 1188.346535] ? find_held_lock+0x36/0x1c0 [ 1188.350627] ? _raw_spin_unlock_irq+0x27/0x70 [ 1188.355165] ? _raw_spin_unlock_irq+0x27/0x70 [ 1188.359669] ? graph_lock+0x170/0x170 [ 1188.363490] ? trace_hardirqs_on+0xbd/0x2c0 [ 1188.367828] ? kasan_check_read+0x11/0x20 [ 1188.372002] ? finish_task_switch+0x1d3/0x870 [ 1188.376511] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1188.381629] ? compat_start_thread+0x80/0x80 [ 1188.386079] ? find_held_lock+0x36/0x1c0 [ 1188.390199] ? lock_downgrade+0x8f0/0x8f0 [ 1188.394365] ? __switch_to_asm+0x40/0x70 [ 1188.398462] ? kasan_check_read+0x11/0x20 [ 1188.402632] ? rcu_is_watching+0x8c/0x150 [ 1188.406794] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1188.411498] ? __fget+0x4d5/0x740 [ 1188.414968] ? ksys_dup3+0x690/0x690 [ 1188.418704] ? find_held_lock+0x36/0x1c0 [ 1188.422784] ? kasan_check_write+0x14/0x20 [ 1188.427033] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1188.431981] usbdev_ioctl+0x25/0x30 [ 1188.435625] ? usbdev_compat_ioctl+0x30/0x30 [ 1188.440058] do_vfs_ioctl+0x1de/0x1720 [ 1188.444019] ? ioctl_preallocate+0x300/0x300 [ 1188.448488] ? __fget_light+0x2f7/0x440 [ 1188.452484] ? __schedule+0x1df0/0x1df0 [ 1188.456484] ? fget_raw+0x20/0x20 [ 1188.459960] ? trace_hardirqs_off+0xb8/0x2b0 [ 1188.464383] ? __sb_end_write+0xac/0xe0 [ 1188.468376] ? do_syscall_64+0x6be/0x820 [ 1188.472469] ? trace_hardirqs_on+0x2c0/0x2c0 [ 1188.476909] ? fput+0x130/0x1a0 [ 1188.480211] ? do_syscall_64+0x9a/0x820 [ 1188.484201] ? do_syscall_64+0x9a/0x820 [ 1188.488187] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1188.492810] ? security_file_ioctl+0x94/0xc0 [ 1188.497248] ksys_ioctl+0xa9/0xd0 [ 1188.500719] __x64_sys_ioctl+0x73/0xb0 [ 1188.504624] do_syscall_64+0x1b9/0x820 [ 1188.508525] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1188.513914] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1188.518858] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1188.523889] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1188.528925] ? recalc_sigpending_tsk+0x180/0x180 [ 1188.533696] ? kasan_check_write+0x14/0x20 [ 1188.537952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1188.542816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.548019] RIP: 0033:0x457089 [ 1188.551224] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1188.570131] RSP: 002b:00007fac38a3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1188.577851] RAX: ffffffffffffffda RBX: 00007fac38a3d6d4 RCX: 0000000000457089 16:52:37 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1188.585127] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 1188.592406] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.599864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1188.607139] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000002 16:52:37 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc00c5512, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1188.717636] FAULT_INJECTION: forcing a failure. [ 1188.717636] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.728989] CPU: 0 PID: 30802 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 1188.736370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.745740] Call Trace: [ 1188.748345] dump_stack+0x1c9/0x2b4 [ 1188.752002] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1188.757222] should_fail.cold.4+0xa/0x11 [ 1188.761310] ? fault_create_debugfs_attr+0x1f0/0x1f0 16:52:37 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1188.766429] ? lock_downgrade+0x8f0/0x8f0 [ 1188.770629] ? graph_lock+0x170/0x170 [ 1188.774459] ? find_held_lock+0x36/0x1c0 [ 1188.778544] ? find_held_lock+0x36/0x1c0 [ 1188.782629] ? __lock_is_held+0xb5/0x140 [ 1188.786725] ? check_same_owner+0x340/0x340 [ 1188.791072] ? rcu_note_context_switch+0x680/0x680 [ 1188.796019] ? _raw_spin_unlock_irq+0x27/0x70 [ 1188.800544] __should_failslab+0x124/0x180 [ 1188.804801] should_failslab+0x9/0x14 [ 1188.808622] __kmalloc+0x2b2/0x720 [ 1188.812183] ? kasan_check_write+0x14/0x20 [ 1188.816455] ? do_raw_spin_lock+0xc1/0x200 [ 1188.820719] ? usb_hcd_submit_urb+0x70e/0x2160 [ 1188.825326] usb_hcd_submit_urb+0x70e/0x2160 [ 1188.829757] ? show_schedstat+0x3b0/0xeb0 [ 1188.833948] ? usb_create_hcd+0x40/0x40 [ 1188.837946] ? find_held_lock+0x36/0x1c0 [ 1188.842039] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1188.847164] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1188.852283] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1188.856913] ? trace_hardirqs_on+0xbd/0x2c0 [ 1188.861276] ? kasan_check_read+0x11/0x20 [ 1188.865468] usb_submit_urb+0x895/0x14d0 [ 1188.869563] ? kasan_check_write+0x14/0x20 [ 1188.873830] proc_do_submiturb+0x2669/0x3d70 [ 1188.878276] ? free_async+0x490/0x490 [ 1188.882121] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1188.887677] ? _copy_from_user+0xdf/0x150 [ 1188.891846] proc_submiturb_compat+0x544/0x800 [ 1188.896468] ? proc_do_submiturb+0x3d70/0x3d70 [ 1188.901103] usbdev_do_ioctl+0x19a5/0x3b30 [ 1188.905370] ? processcompl_compat+0x680/0x680 [ 1188.909979] ? mark_held_locks+0x160/0x160 [ 1188.914252] ? print_usage_bug+0xc0/0xc0 [ 1188.918343] ? __lock_acquire+0x7fc/0x5020 [ 1188.922593] ? graph_lock+0x170/0x170 [ 1188.926403] ? graph_lock+0x170/0x170 [ 1188.930235] ? graph_lock+0x170/0x170 [ 1188.934073] ? find_held_lock+0x36/0x1c0 [ 1188.938152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.943699] ? _parse_integer+0x13b/0x190 [ 1188.947861] ? graph_lock+0x170/0x170 [ 1188.951671] ? graph_lock+0x170/0x170 [ 1188.955498] ? _parse_integer+0x190/0x190 [ 1188.959657] ? graph_lock+0x170/0x170 [ 1188.963483] ? lock_release+0x9f0/0x9f0 [ 1188.967487] ? find_held_lock+0x36/0x1c0 [ 1188.971571] ? lock_downgrade+0x8f0/0x8f0 [ 1188.975737] ? kasan_check_read+0x11/0x20 [ 1188.979899] ? rcu_is_watching+0x8c/0x150 [ 1188.984072] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1188.988779] ? __fget+0x4d5/0x740 [ 1188.992250] ? ksys_dup3+0x690/0x690 [ 1188.995976] ? find_held_lock+0x36/0x1c0 [ 1189.000050] ? kasan_check_write+0x14/0x20 [ 1189.004295] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1189.009258] usbdev_ioctl+0x25/0x30 [ 1189.012920] ? usbdev_compat_ioctl+0x30/0x30 16:52:37 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1189.017352] do_vfs_ioctl+0x1de/0x1720 [ 1189.021251] ? __lock_is_held+0xb5/0x140 [ 1189.025331] ? ioctl_preallocate+0x300/0x300 [ 1189.029753] ? __fget_light+0x2f7/0x440 [ 1189.033739] ? fget_raw+0x20/0x20 [ 1189.037242] ? __sb_end_write+0xac/0xe0 [ 1189.041232] ? fput+0x130/0x1a0 [ 1189.044521] ? do_syscall_64+0x9a/0x820 [ 1189.048511] ? do_syscall_64+0x9a/0x820 [ 1189.052498] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1189.057092] ? security_file_ioctl+0x94/0xc0 [ 1189.061516] ksys_ioctl+0xa9/0xd0 [ 1189.065003] __x64_sys_ioctl+0x73/0xb0 [ 1189.068914] do_syscall_64+0x1b9/0x820 [ 1189.072824] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1189.078215] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1189.083169] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1189.088199] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1189.093242] ? recalc_sigpending_tsk+0x180/0x180 [ 1189.098023] ? kasan_check_write+0x14/0x20 [ 1189.102306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1189.107167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.112362] RIP: 0033:0x457089 [ 1189.115569] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1189.134491] RSP: 002b:00007fac38a3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.142213] RAX: ffffffffffffffda RBX: 00007fac38a3d6d4 RCX: 0000000000457089 [ 1189.149502] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 1189.156782] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 16:52:37 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2800"}) 16:52:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000040890008"]) 16:52:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x6000}}}}}}}}, &(0x7f0000000000)) 16:52:37 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5531, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1189.164053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1189.171328] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000003 16:52:37 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5452, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1189.270152] input:  as /devices/virtual/input/input4218 [ 1189.270164] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 16:52:37 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5594, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb00}}}}}}}}, &(0x7f0000000000)) [ 1189.348272] input:  as /devices/virtual/input/input4219 16:52:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000000000000004089"]) 16:52:38 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000223000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:38 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5547, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:38 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00`\x00'}) 16:52:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80085504, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1189.636569] input:  as /devices/virtual/input/input4220 [ 1189.672044] usb usb1: usbfs: process 30857 (syz-executor3) did not claim interface 2 before use [ 1189.687934] input:  as /devices/virtual/input/input4221 16:52:38 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000000000000408900"]) 16:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x29}}}}}}}}, &(0x7f0000000000)) 16:52:38 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x550b, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:38 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:38 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000003a9e0100"}) 16:52:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0045878, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1189.880389] input:  as /devices/virtual/input/input4222 [ 1189.902713] input:  as /devices/virtual/input/input4223 16:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x89ffffff}}}}}}}}, &(0x7f0000000000)) 16:52:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:38 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000000080000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:38 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550c, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:38 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00t\x00'}) 16:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb000000}}}}}}}}, &(0x7f0000000000)) 16:52:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8108551b, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1190.182612] input:  as /devices/virtual/input/input4224 [ 1190.221877] input:  as /devices/virtual/input/input4225 16:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2b00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8010550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000f00"}) 16:52:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5460, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8000000}}}}}}}}, &(0x7f0000000000)) [ 1190.540525] input:  as /devices/virtual/input/input4226 [ 1190.585981] input:  as /devices/virtual/input/input4227 [ 1190.649189] vhci_hcd: invalid port number 148 [ 1190.653806] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:39 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:39 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000223000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2c00}}}}}}}}, &(0x7f0000000000)) 16:52:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045518, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x41045508, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000300"}) [ 1190.779263] input:  as /devices/virtual/input/input4228 [ 1190.825203] input:  as /devices/virtual/input/input4229 16:52:39 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80085504, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045503, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x41045508, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2f}}}}}}}}, &(0x7f0000000000)) 16:52:39 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e2f00"}) 16:52:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5460, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5514, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1191.036223] input:  as /devices/virtual/input/input4230 [ 1191.065539] usb usb1: usbfs: process 30984 (syz-executor7) did not claim interface 2 before use 16:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x5800000000000000}}}}}}}}, &(0x7f0000000000)) [ 1191.099595] input:  as /devices/virtual/input/input4231 16:52:39 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105502, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:39 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000000080000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x89ffffff00000000}}}}}}}}, &(0x7f0000000000)) 16:52:39 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e4600"}) 16:52:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5514, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004550d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:39 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004550d, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:40 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5450, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc00c5512, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1191.476140] input:  as /devices/virtual/input/input4232 [ 1191.514564] input:  as /devices/virtual/input/input4233 16:52:40 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045515, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4400000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:40 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2d00"}) 16:52:40 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004550c, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:40 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5525, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5452, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1191.758238] input:  as /devices/virtual/input/input4234 16:52:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4400}}}}}}}}, &(0x7f0000000000)) [ 1191.801196] input:  as /devices/virtual/input/input4235 16:52:40 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:40 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000800000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x550b, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:40 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5421, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:40 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2b00"}) 16:52:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3c}}}}}}}}, &(0x7f0000000000)) 16:52:40 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8038550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1192.127647] input:  as /devices/virtual/input/input4236 16:52:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004551e, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xffffffffffffffff}}}}}}}}, &(0x7f0000000000)) [ 1192.189201] input:  as /devices/virtual/input/input4237 16:52:40 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0045878, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:40 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e4300"}) 16:52:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1192.439170] input:  as /devices/virtual/input/input4238 [ 1192.519862] input:  as /devices/virtual/input/input4239 16:52:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc00c5512, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2c00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:41 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551d, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:41 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000223000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:41 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4020940d, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:41 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000003b9e0100"}) 16:52:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x100000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5594, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5451, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xffffff89}}}}}}}}, &(0x7f0000000000)) 16:52:41 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2e00"}) 16:52:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004550d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1192.856508] input:  as /devices/virtual/input/input4240 [ 1192.910591] input:  as /devices/virtual/input/input4241 16:52:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185502, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:41 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5450, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1193.123426] input:  as /devices/virtual/input/input4242 16:52:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfffffffe}}}}}}}}, &(0x7f0000000000)) [ 1193.206906] input:  as /devices/virtual/input/input4243 16:52:42 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:42 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045518, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x550b, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x40049409, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000001000"}) 16:52:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3}}}}}}}}, &(0x7f0000000000)) 16:52:42 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000023020000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8038550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1193.605157] input:  as /devices/virtual/input/input4244 16:52:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105502, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0045878, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1193.669518] input:  as /devices/virtual/input/input4245 16:52:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x700}}}}}}}}, &(0x7f0000000000)) 16:52:42 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000600"}) 16:52:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5460, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1193.909611] input:  as /devices/virtual/input/input4246 16:52:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5452, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1193.975005] input:  as /devices/virtual/input/input4247 16:52:42 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x58}}}}}}}}, &(0x7f0000000000)) 16:52:42 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045519, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8004550f, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045515, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000000800000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:42 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00'}) [ 1194.282768] input:  as /devices/virtual/input/input4248 16:52:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045510, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0045878, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1194.341655] input:  as /devices/virtual/input/input4249 16:52:42 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5514, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfeffffff}}}}}}}}, &(0x7f0000000000)) 16:52:43 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000000000fffffdfd00"}) 16:52:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045503, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000223000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x551f, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045505, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1194.568471] input:  as /devices/virtual/input/input4250 [ 1194.631922] input:  as /devices/virtual/input/input4251 [ 1194.707610] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor7' sets config #2 16:52:43 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045510, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8004550f, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x29000000}}}}}}}}, &(0x7f0000000000)) 16:52:43 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x40085511, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:43 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3900"}) 16:52:43 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000223000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:43 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00008000000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1195.000718] input:  as /devices/virtual/input/input4252 16:52:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5525, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8010550e, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1195.041587] input:  as /devices/virtual/input/input4253 16:52:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3c000000}}}}}}}}, &(0x7f0000000000)) 16:52:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004551e, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8038550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:43 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045503, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:43 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00`\x00'}) 16:52:43 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1195.354154] input:  as /devices/virtual/input/input4254 [ 1195.411339] input:  as /devices/virtual/input/input4255 16:52:44 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00002230000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x58000000}}}}}}}}, &(0x7f0000000000)) 16:52:44 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x40049409, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5451, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000223000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:44 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3100"}) 16:52:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4020940d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5531, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8004550f, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x6000000}}}}}}}}, &(0x7f0000000000)) [ 1195.707179] input:  as /devices/virtual/input/input4256 16:52:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x551f, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045505, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1195.787431] input:  as /devices/virtual/input/input4257 16:52:44 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008550e, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:44 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000002087ffffffff00"}) [ 1195.916264] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor0' sets config #2 [ 1196.007872] input:  as /devices/virtual/input/input4258 [ 1196.058628] input:  as /devices/virtual/input/input4259 16:52:44 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2f000000}}}}}}}}, &(0x7f0000000000)) 16:52:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x40085511, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x40085511, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550d, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:44 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000230200000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:44 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) 16:52:44 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00008000000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1196.308399] input:  as /devices/virtual/input/input4260 16:52:44 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c554a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5421, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8010550e, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1196.360397] input:  as /devices/virtual/input/input4261 16:52:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0xffffffffffffffff}}}}}}}}, &(0x7f0000000000)) 16:52:45 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e2600"}) 16:52:45 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551c, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105500, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1196.603428] input:  as /devices/virtual/input/input4262 [ 1196.676226] input:  as /devices/virtual/input/input4263 16:52:45 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x600000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000001c0), &(0x7f0000000140)="03b0f1147ea0d6"}, 0x20) 16:52:45 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x41045508, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5546, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:45 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x200000a9) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004550c, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:45 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000001f00"}) 16:52:45 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105500, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffdf, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 16:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x2b000000}}}}}}}}, &(0x7f0000000000)) 16:52:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045519, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1196.946715] input:  as /devices/virtual/input/input4264 16:52:45 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3800"}) 16:52:45 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8004551a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x40049409, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x89ffffff}}}}}}}}, &(0x7f0000000000)) [ 1197.217185] input:  as /devices/virtual/input/input4266 [ 1197.272373] input:  as /devices/virtual/input/input4267 16:52:46 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x7}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10) 16:52:46 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5530, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0045878, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:46 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x17, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x7}}}}}}}}, &(0x7f0000000000)) 16:52:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80085504, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:46 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000f00"}) 16:52:46 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc020660b, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x2b}}}}}}}}, &(0x7f0000000000)) 16:52:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 16:52:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105500, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1197.758415] input:  as /devices/virtual/input/input4268 [ 1197.780124] usb usb1: usbfs: process 31593 (syz-executor0) did not claim interface 2 before use 16:52:46 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0189436, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x60}}}}}}}}, &(0x7f0000000000)) 16:52:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8004551a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:46 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1197.817545] input:  as /devices/virtual/input/input4269 16:52:46 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5421, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:46 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200001a4b0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001030000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xf8, &(0x7f00000000c0)="7a64f6bfff9c6ca28be45c3904ff", &(0x7f0000000380)=""/248}, 0x28) 16:52:46 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004551e, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:46 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\b\x00'}) 16:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x44000000}}}}}}}}, &(0x7f0000000000)) 16:52:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1198.240801] input:  as /devices/virtual/input/input4270 16:52:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 16:52:46 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r3) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:46 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105502, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1198.289938] input:  as /devices/virtual/input/input4271 16:52:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4020940d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5525, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x800000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:47 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00H\x00'}) 16:52:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:47 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4004550c, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1198.543459] input:  as /devices/virtual/input/input4272 [ 1198.633272] input:  as /devices/virtual/input/input4273 16:52:47 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0xab, 0x3, @scatter={0x8, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe4754258964cc89d2e47aaaf76d0fd0386bf592a6574a7184", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0x12) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x9}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) 16:52:47 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x2c00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:47 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000000000001fffff00"}) [ 1198.764479] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 16:52:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045519, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:47 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) [ 1198.872296] input:  as /devices/virtual/input/input4274 16:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x6000000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:47 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x24, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="362d5629c518ec1244f6dc58cd7f0700ecdacadeca02b4dd0687293c1f000000000000"]) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000440)=ANY=[], 0x3) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f0000000440), 0x0, 0x20000008, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x181083, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:47 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550c, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1198.919227] input:  as /devices/virtual/input/input4275 16:52:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0045878, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:47 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e3400"}) 16:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x29000000}}}}}}}}, &(0x7f0000000000)) 16:52:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) dup2(r2, r0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 1199.165669] input:  as /devices/virtual/input/input4276 [ 1199.213325] input:  as /devices/virtual/input/input4277 16:52:47 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185502, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:47 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x0, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40), &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550c, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:47 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0xfffffffffffffdb9) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ec2b5538a66ddad283221d363660ed2c02"]) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="290000000400000000000000e498000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2932ed0004000000000000000000010001000000000000000000002000000000010008000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:47 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e3e00"}) 16:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x4}}}}}}}}, &(0x7f0000000000)) 16:52:48 executing program 1: [ 1199.512207] input:  as /devices/virtual/input/input4278 16:52:48 executing program 1: [ 1199.556161] input:  as /devices/virtual/input/input4279 16:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x44}}}}}}}}, &(0x7f0000000000)) 16:52:48 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x2, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:48 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000000600"}) [ 1199.786914] input:  as /devices/virtual/input/input4280 [ 1199.842394] input:  as /devices/virtual/input/input4281 16:52:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:48 executing program 1: 16:52:48 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8108551b, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:48 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x700000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:48 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000019e3700"}) [ 1200.064253] input:  as /devices/virtual/input/input4282 [ 1200.123154] input:  as /devices/virtual/input/input4283 16:52:48 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x0, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40), &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8108551b, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:48 executing program 1: 16:52:48 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x89ffffff00000000}}}}}}}}, &(0x7f0000000000)) 16:52:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="b703000000000000000000000041700008"]) 16:52:48 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00l\x00'}) 16:52:48 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x4, 0x3ff) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ff84"]) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2], 0x3) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BLKRRPART(r4, 0x125f, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r5, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r5, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="d2ab4e7600000000000000000041700008"]) [ 1200.346800] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 1200.367741] input:  as /devices/virtual/input/input4284 16:52:48 executing program 1: 16:52:48 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x551f, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0xb00000000000000}}}}}}}}, &(0x7f0000000000)) [ 1200.428191] input:  as /devices/virtual/input/input4285 16:52:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5451, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:49 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x40000100) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="f75cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:49 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000349e0100"}) 16:52:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ap\x00\b']) [ 1200.710382] input:  as /devices/virtual/input/input4286 [ 1200.756319] input:  as /devices/virtual/input/input4287 16:52:49 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x0, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40), &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:49 executing program 1: 16:52:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045518, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:49 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x3b7, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0xfffffffe}}}}}}}}, &(0x7f0000000000)) 16:52:49 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000000000000100"}) 16:52:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB='F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ap\x00\b']) 16:52:49 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x5, 0x2, 0x1) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643de36ff4776a4e456bd32c0c8526c3f08d30dfc6831000d986d8fe44a3d959bb93109018c8017b1e0851cb0fa7e6f4c8b01a710f52397cf54694dc3da78ed5a54b33c8562dfc47558915c2f609c315cf24cbddceafcb439277efc1c3d79ce7d660bef2451f9dd3704f4557740f49f93d16885133e98797c0bd570bbbecee8bcac46b446da380302844eaa6910b68ed9ae7b8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="726177000000000000000000000040060000000000000000000000000000000018000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) [ 1201.016412] input:  as /devices/virtual/input/input4288 16:52:49 executing program 1: 16:52:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="ab03000000000000000000000041700008"]) 16:52:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c5546, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:49 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x764eabd2, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1201.072266] input:  as /devices/virtual/input/input4289 16:52:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x100000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:49 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00'}) 16:52:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x5450, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:49 executing program 1: [ 1201.311827] input:  as /devices/virtual/input/input4290 [ 1201.390758] input:  as /devices/virtual/input/input4291 16:52:50 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x56, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a71", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x2f00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="b103000000000000000000000041700008"]) 16:52:50 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x3, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x3}) 16:52:50 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0xfffffffffffffffc) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="737f5d950f5cbbdc5660baa2dbf3028a4354805d1e7f2b6df750ebb811c7a5db5cb94d6ffd6f5a1802b17fb2cc0b7214b4d4fd828a2eecc07d08df0fb8841280fa28a73f6fe029df617e2466c6126888feb127a7efc90403716fbc2d8a0124f8a1269314081abf6af71e5b81399fa4ee3f83020000002c10192582e5db611e971995c7"]) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="291000000400000080000c000000000001000000000000000000000000000000810000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:50 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000000000000000019e4300"}) [ 1201.681627] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 1201.693250] input:  as /devices/virtual/input/input4292 16:52:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:50 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x30, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000000000000041700008"]) [ 1201.738954] input:  as /devices/virtual/input/input4293 16:52:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x8000000}}}}}}}}, &(0x7f0000000000)) 16:52:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x80045515, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:50 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000000000ffffffff00"}) 16:52:50 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c7f"]) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="29000008009f00000000000000000081c00000010000000000aa9a9d89090aefc0234132c2c8cc40ea7d8baa4c55f2a20ebf91517207170000000000000000db3747f9e34e1a36c5c1ced994a62a00f9b378df8406781d0340896297580ae360af482867d11fa4d43948fc2f639b0a7131ab500e7223daaf890eaf000044a5bae4b50b750cc4a75d56dc16af8340275e0760b7dbdf28826efc2a7f516cdbb38ac8500dc06446d8b4b5531d0b8e8463d5bef882b17874f118a275ea21aa1b643958bb55875a544bd03b702e7bbd517bcaa8b4a6531cfd95e1b837a5296f833893cab670b163b5fd0e6d5bedb9a719f40120f180c3fb5ad6e8bcfe82e44d2da2a950935d229aba2deb60d21d5af2ed4ffd3586e07c4d7d6ee576cb86791c2fe41793cf9ee62c67c921cf0a7172206ab5991783a62097d3f513a481dcd3b807ae66e841ae01ad735543fbd51a69329372aad40ac816aa2f7c33e33a10a0325e83d8ef2f152d5bc44e5103307850acbcc536dfa23596161c793bbb10cfa3f29f6ce0574d04fdb64bf44c7ef2ed52cb9caab8d62b9932f696e28b2a86abbf24de62980b7ae6db11d8384999240be917c5097b90a856a74fe304c1f33e47e2422f914efd55d7a166d124dda49a3d4a2624982a7803aae04f13e2d963d580c475b758419cf1eaf684346b170473be237b8673c1b6b16a52c719b816af25ff770ca913206cfe767c0e4eac636229df8d7d90604d23dd4ea8c451679dd13350a84d5c1b5b50524e9bf81dfca28d580b43a3e2799f7870ec94be025fc4a72a953de8ca8798a2c51253a91a7169f99b8325331eb70c27ce81c41aab311ea71922f1942e26655c7b20c7ce424eca85c730153dae5b122ed4fd51e79096ff1c7c3e61e3564f272c9477d6626c87afc0405cf6909504090bb23842e1a2226e113ee5f538e891c18cdd09bb993bc38cd7ba435954366d444c96138378eab9d949"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:50 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x4a, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:50 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x81, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df020", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 1202.108414] input:  as /devices/virtual/input/input4294 16:52:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) 16:52:50 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x3b1, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x4400}}}}}}}}, &(0x7f0000000000)) 16:52:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0205000000000000000000000041700008"]) [ 1202.164960] input:  as /devices/virtual/input/input4295 16:52:50 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000e4ffffff00"}) 16:52:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000480000000041700008"]) 16:52:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:50 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x3ab, 0x0, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185502, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1202.404832] input:  as /devices/virtual/input/input4296 16:52:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x6000}}}}}}}}, &(0x7f0000000000)) 16:52:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000041700008"]) [ 1202.510624] input:  as /devices/virtual/input/input4297 16:52:51 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0xa, 0x2b0) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000740000000041700008"]) 16:52:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:51 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x81, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df020", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:51 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x6c00, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:51 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a31000000002d9e0100"}) 16:52:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="ab03000000000000000000000041700008"]) 16:52:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000002000000000000000041700008"]) 16:52:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x3}}}}}}}}, &(0x7f0000000000)) 16:52:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) [ 1202.940909] input:  as /devices/virtual/input/input4298 [ 1202.954146] vhci_hcd: invalid port number 148 [ 1202.958772] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 [ 1202.965894] vhci_hcd: invalid port number 71 [ 1202.970432] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 16:52:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="d2ab4e7600000000000000000041700008"]) 16:52:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x58}}}}}}}}, &(0x7f0000000000)) [ 1203.004417] input:  as /devices/virtual/input/input4299 16:52:51 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x5000000, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000003000000000000000041700008"]) 16:52:51 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d587253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x100}, 0x41d189922e39cea) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000480)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:51 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:51 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000449e0100"}) 16:52:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB='F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ap\x00\b']) [ 1203.218923] vhci_hcd: invalid port number 71 [ 1203.223542] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 [ 1203.234171] vhci_hcd: invalid port number 148 [ 1203.238766] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:51 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x96, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe475425", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0xffffff89}}}}}}}}, &(0x7f0000000000)) [ 1203.279842] input:  as /devices/virtual/input/input4300 16:52:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:51 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0xfdfdffff, [{0x0, 0x704000, 0x7ff0bdbe}]}) [ 1203.387221] input:  as /devices/virtual/input/input4301 16:52:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ap\x00\b']) 16:52:52 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200030000000000000000000041700008"]) 16:52:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:52 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00t\x00'}) 16:52:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0xfeffffff00000000}}}}}}}}, &(0x7f0000000000)) [ 1203.516929] vhci_hcd: invalid port number 71 [ 1203.521509] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 [ 1203.588815] vhci_hcd: invalid port number 148 [ 1203.593673] vhci_hcd: default hub control req: 1400 v0000 i0094 l0 16:52:52 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x1000000, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) [ 1203.632745] input:  as /devices/virtual/input/input4302 16:52:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="b103000000000000000000000041700008"]) [ 1203.689699] input:  as /devices/virtual/input/input4303 [ 1203.832934] vhci_hcd: invalid port number 71 [ 1203.837495] vhci_hcd: default hub control req: 0e08 v0b41 i0047 l17176 16:52:52 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) read$FUSE(r3, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001f80)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67ff000000000000009987d08cd0963fe883a7d50472979225c70500000000b7cf17af90c687e8f75ffaaa87423fcd0c64994d79e646047a1013b25d7e0767887fe25ccb5d5299ecdd8c72cc1da0c9f0363f1a97f3e45cde7e250ef8ed5b947f580d8f84fca7ee1763c222a4899903bb60fe7123f2e3b2c667daf0229cb4d507253e68ef10991cfc09394cc773de12d8df00000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 16:52:52 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000600000000041700008"]) 16:52:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x3c00000000000000}}}}}}}}, &(0x7f0000000000)) 16:52:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="b703000000000000000000000041700008"]) [ 1203.953923] ------------[ cut here ]------------ [ 1203.958885] usb usb1: BOGUS urb flags, 40 --> 0 [ 1203.963960] WARNING: CPU: 1 PID: 32153 at drivers/usb/core/urb.c:503 usb_submit_urb+0x719/0x14d0 [ 1203.972896] Kernel panic - not syncing: panic_on_warn set ... [ 1203.972896] [ 1203.980279] CPU: 1 PID: 32153 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #215 [ 1203.987645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.997006] Call Trace: [ 1203.999611] dump_stack+0x1c9/0x2b4 [ 1204.003262] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1204.008502] panic+0x238/0x4e7 [ 1204.011712] ? add_taint.cold.5+0x16/0x16 [ 1204.015897] ? __warn.cold.8+0x148/0x1ba [ 1204.019985] ? usb_submit_urb+0x719/0x14d0 [ 1204.024237] __warn.cold.8+0x163/0x1ba [ 1204.028160] ? usb_submit_urb+0x719/0x14d0 [ 1204.032409] report_bug+0x252/0x2d0 [ 1204.036073] do_error_trap+0x1fc/0x4d0 [ 1204.040019] ? math_error+0x3e0/0x3e0 [ 1204.043863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.048732] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1204.053768] ? vprintk_func+0x81/0x117 [ 1204.057674] ? printk+0xa7/0xcf [ 1204.060988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.065858] do_invalid_op+0x1b/0x20 [ 1204.069590] invalid_op+0x14/0x20 [ 1204.073060] RIP: 0010:usb_submit_urb+0x719/0x14d0 [ 1204.077918] Code: 08 fd 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 1f ce 72 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 40 d8 7d 87 e8 57 ec d2 fc <0f> 0b e8 30 29 08 fd 48 c7 c6 40 d9 7d 87 4c 89 f7 e8 71 2a 08 fd [ 1204.096836] RSP: 0018:ffff880195c8f278 EFLAGS: 00010282 [ 1204.102223] RAX: 0000000000000000 RBX: ffff8801b1f4b600 RCX: ffffc90003cb3000 [ 1204.109505] RDX: 0000000000002c6f RSI: ffffffff8163ac01 RDI: ffff880195c8ef68 [ 1204.116790] RBP: ffff880195c8f2e8 R08: ffff8801ba40a4c0 R09: 0000000000000006 [ 1204.124070] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1204.131366] R13: 0000000000000040 R14: 0000000000000000 R15: ffff8801ceadaf40 [ 1204.138663] ? vprintk_func+0x81/0x117 [ 1204.142573] ? usb_submit_urb+0x719/0x14d0 [ 1204.146909] ? kasan_check_write+0x14/0x20 16:52:52 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) userfaultfd(0x0) r0 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x6}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000400600000000000000000000000000000000180000004988f94a3a0b612a67a9f4cea5ff00000000000000"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc00, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000001f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000020c0)='.dead\x00', &(0x7f0000002100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002140)='vmnet1system\x00', 0x0) add_key$keyring(&(0x7f0000002080)='keyring\x00', &(0x7f0000002180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x81, 0xffff, 0x6, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xffffffffffffffdc, @empty, 0x7fffffff}], 0x68) ftruncate(r1, 0x0) getpeername$packet(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x14) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$SG_IO(r7, 0x2285, &(0x7f0000001e00)={0x0, 0xfffffffffffffffb, 0x96, 0x3, @scatter={0x9, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/4096, 0x1000}]}, &(0x7f0000001c40)="44a54076aaa38669acb7cadb8ec18204ac9833a607f77a0116a38cb9a62ae7456a8664b60ffb7cf726ac26a938ff464a74241c8e2773026da631875c0c79ff960939a6d23a7a468142d575a80f484de7c03de4ba5a7131a0e26c1ceea0dc69a287b115d4e40627c6350d4b26a2c44b40db59562feeafebbe54a2286d58f49df0203aaff7a10a4a9f098fa0bb688fd478ec6abe475425", &(0x7f0000001d00)=""/185, 0x6, 0x6, 0x0, &(0x7f0000001dc0)}) sendfile(r2, r7, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 16:52:52 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00H\x00'}) 16:52:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x24, 0x0, 0x0) 16:52:52 executing program 7: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x2000000, [{0x0, 0x704000, 0x7ff0bdbe}]}) 16:52:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000000000000041700008"]) [ 1204.151179] proc_do_submiturb+0x2669/0x3d70 [ 1204.155627] ? free_async+0x490/0x490 [ 1204.159483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1204.165032] ? _copy_from_user+0xdf/0x150 [ 1204.169233] proc_submiturb_compat+0x544/0x800 [ 1204.173831] ? proc_do_submiturb+0x3d70/0x3d70 [ 1204.178454] ? get_futex_value_locked+0xcb/0xf0 [ 1204.183140] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1204.188197] usbdev_do_ioctl+0x19a5/0x3b30 [ 1204.192479] ? processcompl_compat+0x680/0x680 [ 1204.197091] ? futex_wait+0x5d2/0xa20 [ 1204.200924] ? mark_held_locks+0x160/0x160 [ 1204.205186] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1204.210404] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1204.215974] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 1204.221088] ? futex_wake+0x304/0x760 [ 1204.224928] ? lock_downgrade+0x8f0/0x8f0 [ 1204.229108] ? graph_lock+0x170/0x170 [ 1204.232922] ? do_futex+0x249/0x27d0 [ 1204.236651] ? rcu_is_watching+0x8c/0x150 [ 1204.240824] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1204.245510] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1204.250202] ? find_held_lock+0x36/0x1c0 16:52:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880), 0x0, 0x0, 0x0) [ 1204.254285] ? lock_downgrade+0x8f0/0x8f0 [ 1204.258465] ? kasan_check_read+0x11/0x20 [ 1204.262653] ? rcu_is_watching+0x8c/0x150 [ 1204.266811] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1204.271523] ? __fget+0x4d5/0x740 [ 1204.274997] ? ksys_dup3+0x690/0x690 [ 1204.278716] ? trace_hardirqs_on+0x2c0/0x2c0 [ 1204.283136] ? kasan_check_write+0x14/0x20 [ 1204.287395] ? trace_hardirqs_off+0xb8/0x2b0 [ 1204.291836] usbdev_ioctl+0x25/0x30 [ 1204.295494] ? usbdev_compat_ioctl+0x30/0x30 [ 1204.299919] do_vfs_ioctl+0x1de/0x1720 [ 1204.303825] ? kasan_check_read+0x11/0x20 [ 1204.307992] ? rcu_is_watching+0x8c/0x150 [ 1204.312150] ? trace_hardirqs_on+0xbd/0x2c0 [ 1204.316492] ? ioctl_preallocate+0x300/0x300 [ 1204.320914] ? __fget_light+0x2f7/0x440 [ 1204.324908] ? putname+0xf2/0x130 [ 1204.328386] ? fget_raw+0x20/0x20 [ 1204.331852] ? rcu_read_lock_sched_held+0x108/0x120 [ 1204.336906] ? __x64_sys_futex+0x47f/0x6a0 [ 1204.341152] ? do_syscall_64+0x9a/0x820 [ 1204.345140] ? do_syscall_64+0x9a/0x820 [ 1204.349132] ? lockdep_hardirqs_on+0x421/0x5c0 16:52:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880), 0x0, 0x0, 0x0) [ 1204.353734] ? security_file_ioctl+0x94/0xc0 [ 1204.358158] ksys_ioctl+0xa9/0xd0 [ 1204.361629] __x64_sys_ioctl+0x73/0xb0 [ 1204.365528] do_syscall_64+0x1b9/0x820 [ 1204.369431] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1204.374822] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1204.379766] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1204.384791] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1204.389820] ? recalc_sigpending_tsk+0x180/0x180 [ 1204.394589] ? kasan_check_write+0x14/0x20 [ 1204.398849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.403714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1204.408915] RIP: 0033:0x457089 [ 1204.412150] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.431068] RSP: 002b:00007fb6138e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.438800] RAX: ffffffffffffffda RBX: 00007fb6138e86d4 RCX: 0000000000457089 [ 1204.446092] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 1204.453370] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.460650] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1204.467928] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000000 [ 1204.475749] Dumping ftrace buffer: [ 1204.479418] (ftrace buffer empty) [ 1204.483119] Kernel Offset: disabled [ 1204.486730] Rebooting in 86400 seconds..