0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

[ 1114.066119] input: syz0 as /devices/virtual/input/input11455
[ 1114.072614] input: syz0 as /devices/virtual/input/input11454
[ 1114.073145] input: syz1 as /devices/virtual/input/input11456
[ 1114.085620] input: syz1 as /devices/virtual/input/input11457
18:53:18 executing program 3:
ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x1)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:18 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000100)={0x80000001, 0xc8, "4ee6b0e2c9210f7a5c67713de62f9e561f3ea953aa22fc99a5bfca9573c5ab756572068c5f4048a2d256ceb5df7783bcd9b9957ffe829d125e39ca130c2f7a7332ebd626f978830ed7c1cadcb14761352058214b639aa8faa117c858b8768023a4a56d5816c42b49980e9f8917c6e995b95755c2b671eea7e25405724b63a21aae7de7a468b46b2a618df92b091e714b31cd530d52520bbf2de6b19eb5e37881a7d5d60a29dfe0f2f6eca04ea9056003915876b2003239016dd5d497df182a8233f1a096513ae873"})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:18 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.120514] input: syz1 as /devices/virtual/input/input11458
[ 1114.131880] input: syz1 as /devices/virtual/input/input11459
[ 1114.148542] input: syz1 as /devices/virtual/input/input11460
18:53:18 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x69) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:18 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:18 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xa)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:18 executing program 3:
ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x1)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.175521] input: syz1 as /devices/virtual/input/input11461
[ 1114.203067] input: syz0 as /devices/virtual/input/input11462
18:53:18 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000100)={0x80000001, 0xc8, "4ee6b0e2c9210f7a5c67713de62f9e561f3ea953aa22fc99a5bfca9573c5ab756572068c5f4048a2d256ceb5df7783bcd9b9957ffe829d125e39ca130c2f7a7332ebd626f978830ed7c1cadcb14761352058214b639aa8faa117c858b8768023a4a56d5816c42b49980e9f8917c6e995b95755c2b671eea7e25405724b63a21aae7de7a468b46b2a618df92b091e714b31cd530d52520bbf2de6b19eb5e37881a7d5d60a29dfe0f2f6eca04ea9056003915876b2003239016dd5d497df182a8233f1a096513ae873"}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:18 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.235909] input: syz1 as /devices/virtual/input/input11463
[ 1114.275403] input: syz0 as /devices/virtual/input/input11464
18:53:18 executing program 3:
ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x1)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:18 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:18 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000100)={0x80000001, 0xc8, "4ee6b0e2c9210f7a5c67713de62f9e561f3ea953aa22fc99a5bfca9573c5ab756572068c5f4048a2d256ceb5df7783bcd9b9957ffe829d125e39ca130c2f7a7332ebd626f978830ed7c1cadcb14761352058214b639aa8faa117c858b8768023a4a56d5816c42b49980e9f8917c6e995b95755c2b671eea7e25405724b63a21aae7de7a468b46b2a618df92b091e714b31cd530d52520bbf2de6b19eb5e37881a7d5d60a29dfe0f2f6eca04ea9056003915876b2003239016dd5d497df182a8233f1a096513ae873"})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1114.299030] input: syz1 as /devices/virtual/input/input11465
[ 1114.311176] input: syz1 as /devices/virtual/input/input11466
[ 1114.320462] input: syz1 as /devices/virtual/input/input11467
18:53:18 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xa)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:18 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000100)={r0, 0x1, {0x0, 0x0, 0x0, 0xb35, 0x2, 0x0, 0x5, 0x1f, 0x5, "aa0ee3324eb015b031a39a0e44d4e390bba5a6309b43046d6ccb0b2d4174e194a874de5bd1814f9106e95a0ce140277c5693e14825bdd8092bd11bc719913853", "687c2d3db1a56ab7a4b547279dccf136035a855432c30a98784062f339a1dee7b1c7a67bfcc663f71b083059eb6f9366c50d99ddfc9db8ddcfd7d5d9c0a078ae", "c851c0306c3114754d7c88c5f6cab299ca422c6875bfc67e64cc4eaa8a3a57ef", [0x0, 0xa]}})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080))
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
socketpair(0x29, 0x2, 0x1, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:18 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000100)={0x80000001, 0xc8, "4ee6b0e2c9210f7a5c67713de62f9e561f3ea953aa22fc99a5bfca9573c5ab756572068c5f4048a2d256ceb5df7783bcd9b9957ffe829d125e39ca130c2f7a7332ebd626f978830ed7c1cadcb14761352058214b639aa8faa117c858b8768023a4a56d5816c42b49980e9f8917c6e995b95755c2b671eea7e25405724b63a21aae7de7a468b46b2a618df92b091e714b31cd530d52520bbf2de6b19eb5e37881a7d5d60a29dfe0f2f6eca04ea9056003915876b2003239016dd5d497df182a8233f1a096513ae873"})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1114.356949] input: syz0 as /devices/virtual/input/input11468
18:53:18 executing program 3:
ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x1)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:18 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:18 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2f)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1114.417284] input: syz1 as /devices/virtual/input/input11470
[ 1114.423978] input: syz1 as /devices/virtual/input/input11469
[ 1114.449042] input: syz1 as /devices/virtual/input/input11471
18:53:18 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xa) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:19 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async, rerun: 32)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000100)={r0, 0x1, {0x0, 0x0, 0x0, 0xb35, 0x2, 0x0, 0x5, 0x1f, 0x5, "aa0ee3324eb015b031a39a0e44d4e390bba5a6309b43046d6ccb0b2d4174e194a874de5bd1814f9106e95a0ce140277c5693e14825bdd8092bd11bc719913853", "687c2d3db1a56ab7a4b547279dccf136035a855432c30a98784062f339a1dee7b1c7a67bfcc663f71b083059eb6f9366c50d99ddfc9db8ddcfd7d5d9c0a078ae", "c851c0306c3114754d7c88c5f6cab299ca422c6875bfc67e64cc4eaa8a3a57ef", [0x0, 0xa]}}) (async, rerun: 32)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080))
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
socketpair(0x29, 0x2, 0x1, &(0x7f0000000000)) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0xfffffffc]}, 0x45c)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080))
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe)

[ 1114.470744] input: syz1 as /devices/virtual/input/input11472
[ 1114.478206] input: syz0 as /devices/virtual/input/input11473
18:53:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2f) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1114.548131] input: syz1 as /devices/virtual/input/input11474
[ 1114.565985] input: syz1 as /devices/virtual/input/input11476
[ 1114.575912] input: syz1 as /devices/virtual/input/input11475
[ 1114.584978] input: syz1 as /devices/virtual/input/input11477
18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x7, 0x8, 0x2, 0x8001}, 'syz0\x00', 0x32})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000c80)=""/4096, &(0x7f0000000000)=""/57, &(0x7f0000000040)=""/35, 0xf000})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0xfffffffd}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x8b)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1114.596421] input: syz1 as /devices/virtual/input/input11478
18:53:19 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000100)={r0, 0x1, {0x0, 0x0, 0x0, 0xb35, 0x2, 0x0, 0x5, 0x1f, 0x5, "aa0ee3324eb015b031a39a0e44d4e390bba5a6309b43046d6ccb0b2d4174e194a874de5bd1814f9106e95a0ce140277c5693e14825bdd8092bd11bc719913853", "687c2d3db1a56ab7a4b547279dccf136035a855432c30a98784062f339a1dee7b1c7a67bfcc663f71b083059eb6f9366c50d99ddfc9db8ddcfd7d5d9c0a078ae", "c851c0306c3114754d7c88c5f6cab299ca422c6875bfc67e64cc4eaa8a3a57ef", [0x0, 0xa]}}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080))
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
socketpair(0x29, 0x2, 0x1, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.631996] input: syz0 as /devices/virtual/input/input11479
18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x922c0, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2)

18:53:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2f)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) (async)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2f) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

[ 1114.688881] input: syz1 as /devices/virtual/input/input11480
[ 1114.696117] input input11481: cannot allocate more than FF_MAX_EFFECTS effects
[ 1114.717061] input: syz1 as /devices/virtual/input/input11482
18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.774076] input: syz1 as /devices/virtual/input/input11483
[ 1114.794240] input: syz0 as /devices/virtual/input/input11484
[ 1114.813183] input: syz1 as /devices/virtual/input/input11485
18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.817548] input: syz1 as /devices/virtual/input/input11486
[ 1114.832904] input: syz1 as /devices/virtual/input/input11487
18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x922c0, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2)

[ 1114.869309] input: syz1 as /devices/virtual/input/input11488
[ 1114.881636] input: syz1 as /devices/virtual/input/input11489
18:53:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x922c0, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1114.922282] input: syz1 as /devices/virtual/input/input11490
[ 1114.928574] input: syz1 as /devices/virtual/input/input11491
18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x100, 0x410385d0, 0xfff], 0x3, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7fffffff, 0x6, &(0x7f0000000040)=[0xff, 0x7f, 0xe0a, 0x3, 0x2, 0xbf59], &(0x7f0000000080)=[0x8, 0x80, 0x2, 0x2, 0xa17, 0xb55, 0x4, 0x1], &(0x7f0000000100)=[0xf7, 0x1]})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x922c0, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x922c0, 0x0) (async)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) (async)

[ 1115.000393] input: syz1 as /devices/virtual/input/input11492
[ 1115.012992] input: syz0 as /devices/virtual/input/input11493
[ 1115.032119] input: syz0 as /devices/virtual/input/input11494
18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x100, 0x410385d0, 0xfff], 0x3, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

[ 1115.048727] input: syz1 as /devices/virtual/input/input11495
18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0xfffffffd, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x4, 0x1000, 0x3f, 0x6}, 0x1a, [0x401, 0x200, 0x3, 0x5b, 0x400, 0x5, 0x3f80, 0x5, 0xff, 0x7, 0xff, 0x8000, 0x1, 0xaf21, 0x9, 0x5, 0x10001, 0x7fda8daa, 0xfffffffb, 0x74ae46a4, 0x100000, 0x2, 0x8, 0xec25, 0x2, 0x744cbb71, 0x9c, 0x86, 0x101, 0x0, 0x5f4, 0x8, 0x7, 0x80, 0x1c, 0x4, 0xfffffbff, 0x5, 0xfffffff8, 0xffffffff, 0x3, 0x0, 0x7, 0xed, 0x58db3a88, 0xa4, 0xfffffe00, 0x6, 0x9, 0x8001, 0x3ff, 0xfff, 0x4, 0xb6, 0x1000, 0x80000000, 0x216, 0xce, 0x7f, 0x6, 0x9, 0xfffeffff, 0x3, 0x4], [0x3, 0xd78, 0x7, 0xce1, 0x6, 0x7, 0x6, 0xbfa8, 0x7fffffff, 0x4, 0x1, 0x6, 0x1000, 0x3, 0x3ff, 0xfd, 0x2, 0x80000000, 0x7, 0x1b, 0x9, 0x5, 0x1, 0x101, 0x8, 0x0, 0x7ff, 0xd2d9, 0x5, 0x7, 0x6, 0x80000000, 0xb530, 0x5, 0x80, 0x7fffffff, 0x8, 0x0, 0x178, 0x1ff, 0x10000, 0x7f, 0x1, 0x1, 0x7, 0x7, 0x1000, 0x0, 0x9, 0x8, 0x3, 0x7fffffff, 0x2, 0x3ff, 0x1b52f93c, 0x4, 0x0, 0xea, 0x81, 0xc0, 0x9, 0x0, 0x2, 0x401], [0x2, 0x5, 0x4, 0x3, 0x4, 0x81, 0x2fe6, 0x1, 0x8, 0x1, 0x7ff, 0x96, 0x5, 0x1, 0x2, 0x0, 0x7fff, 0x6, 0x7c00, 0x1, 0x68, 0x100, 0x20, 0xffffff80, 0x7fffffff, 0x7ff, 0x8, 0x7fffffff, 0x7, 0x8, 0x3, 0x8, 0x0, 0x7, 0x5, 0x2, 0x81, 0x7, 0x5, 0x9, 0x8, 0x7, 0x9, 0x6, 0x1, 0xf97, 0x7, 0x401, 0x7ff, 0x4, 0x4, 0x400, 0x4, 0x8, 0x0, 0x2, 0x5, 0xfe, 0x4, 0xa60, 0x3, 0x5, 0x2, 0x98], [0x0, 0xc32, 0xffff7909, 0x6, 0xfffffff9, 0xc9, 0x20, 0x9, 0x6, 0x3, 0x1, 0xfff, 0x8, 0x401, 0x5ec83aa0, 0x7fff, 0x2, 0x6, 0x4, 0x20, 0xffffff01, 0x6f4, 0x8000, 0xffffffff, 0x3, 0x3, 0x3f, 0x1, 0x1, 0xa3, 0x9, 0x401, 0x8, 0x8, 0x4, 0x2, 0x7fff, 0x3f, 0x6, 0x2, 0x0, 0x1, 0x8, 0x7, 0x0, 0x48, 0x7, 0x5, 0x50aa, 0x4e, 0x2, 0x10000, 0xffffffd3, 0x673, 0x9, 0xffff, 0x34, 0x7f, 0x4, 0xfff, 0xfffffffc, 0x2, 0xdff, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7fffffff, 0x6, &(0x7f0000000040)=[0xff, 0x7f, 0xe0a, 0x3, 0x2, 0xbf59], &(0x7f0000000080)=[0x8, 0x80, 0x2, 0x2, 0xa17, 0xb55, 0x4, 0x1], &(0x7f0000000100)=[0xf7, 0x1]}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1115.092360] input: syz1 as /devices/virtual/input/input11496
[ 1115.119596] input input11499: cannot allocate more than FF_MAX_EFFECTS effects
18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r1}, 0x4)

18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x100, 0x410385d0, 0xfff], 0x3, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

[ 1115.158588] input: syz1 as /devices/virtual/input/input11500
[ 1115.172512] input: syz0 as /devices/virtual/input/input11501
[ 1115.188582] input: syz1 as /devices/virtual/input/input11503
18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7fffffff, 0x6, &(0x7f0000000040)=[0xff, 0x7f, 0xe0a, 0x3, 0x2, 0xbf59], &(0x7f0000000080)=[0x8, 0x80, 0x2, 0x2, 0xa17, 0xb55, 0x4, 0x1], &(0x7f0000000100)=[0xf7, 0x1]})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7fffffff, 0x6, &(0x7f0000000040)=[0xff, 0x7f, 0xe0a, 0x3, 0x2, 0xbf59], &(0x7f0000000080)=[0x8, 0x80, 0x2, 0x2, 0xa17, 0xb55, 0x4, 0x1], &(0x7f0000000100)=[0xf7, 0x1]}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) (async)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r1}, 0x4)

[ 1115.213714] input: syz0 as /devices/virtual/input/input11505
[ 1115.221028] input: syz1 as /devices/virtual/input/input11506
[ 1115.249304] input: syz0 as /devices/virtual/input/input11507
18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000180))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000040)=0x9)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000680)={0x10})

18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x8, 0x7, {0x51, 0x3, 0x6, {0x0, 0x3e}, {0x9}, @ramp={0x1000, 0x3, {0x3f8, 0x2, 0x5, 0x80}}}, {0x53, 0x7ff, 0x0, {0x4812, 0x6}, {0x394a, 0xde}, @rumble={0x6, 0x1}}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0xffffffff, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x2, 0x40, 0x6, 0x5, 0x3, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x57a, 0x5, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0xfffffffe, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x3, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r1}, 0x4)

[ 1115.326783] input: syz1 as /devices/virtual/input/input11512
[ 1115.339313] input: syz0 as /devices/virtual/input/input11511
[ 1115.363193] input: syz0 as /devices/virtual/input/input11513
18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000180))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000040)=0x9)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000680)={0x10})

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x8, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x8, 0x7, {0x51, 0x3, 0x6, {0x0, 0x3e}, {0x9}, @ramp={0x1000, 0x3, {0x3f8, 0x2, 0x5, 0x80}}}, {0x53, 0x7ff, 0x0, {0x4812, 0x6}, {0x394a, 0xde}, @rumble={0x6, 0x1}}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0xffffffff, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x2, 0x40, 0x6, 0x5, 0x3, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x57a, 0x5, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0xfffffffe, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x3, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x8, 0x7, {0x51, 0x3, 0x6, {0x0, 0x3e}, {0x9}, @ramp={0x1000, 0x3, {0x3f8, 0x2, 0x5, 0x80}}}, {0x53, 0x7ff, 0x0, {0x4812, 0x6}, {0x394a, 0xde}, @rumble={0x6, 0x1}}}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0xffffffff, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x2, 0x40, 0x6, 0x5, 0x3, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x57a, 0x5, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0xfffffffe, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x3, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

[ 1115.382275] input: syz1 as /devices/virtual/input/input11514
18:53:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"bac90959558d297127f4ff412e84772a4cfe72e7f33e9e12eb5427d35e6b", 0x3, 0x0, 0x401, 0x200, 0x8, 0x16, 0x200, 0x0, [0xfff, 0x6dcd873e, 0x800, 0x80000001, 0x40, 0xffffffe0, 0x3ff, 0x7fffffff, 0x7fff, 0x5, 0x2, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x80000000, 0x2e94, 0x3]})
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x400, 0x1000, 0x3}, 'syz0\x00', 0x2c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz1\x00', {0x22, 0x8, 0xbe, 0xc000}, 0x34, [0x4, 0x0, 0x2, 0x10001, 0x4, 0x3, 0x3, 0x2, 0x1, 0x3, 0x7fff, 0x40, 0x3c4c, 0x2, 0x3, 0x10000, 0x18b, 0x1, 0x401, 0x101, 0x7, 0x0, 0x5, 0xaa, 0x200, 0x1, 0x5, 0xaf, 0x4b, 0x3fcd, 0xf7e, 0x2, 0xffff, 0x8, 0x687, 0xc0, 0xa8, 0x7, 0x3f, 0x4, 0x3, 0x100, 0x1000, 0x0, 0x10000, 0x8ae, 0x8, 0x8, 0xffffffff, 0x1, 0xdd, 0x80000001, 0xed7, 0x0, 0x2, 0x4, 0x4220, 0xffffffff, 0x80000000, 0x0, 0x83, 0x1, 0xf1, 0xcd], [0x7fff, 0x9, 0x81, 0x1e5, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x7fff, 0x1, 0x9, 0x80000001, 0x80000000, 0x5, 0x6, 0x7fffffff, 0x8000, 0x603, 0x20, 0x4, 0x1, 0x8, 0xd2, 0x8000, 0x4b, 0x1, 0x7fff, 0xfffffffe, 0xffffffff, 0x7d7a, 0x79, 0x5, 0x80, 0x0, 0x2, 0x6, 0x2a, 0x9cf4, 0x6, 0x5, 0x6, 0x100, 0x81, 0x8, 0x6, 0x7ff, 0x0, 0x7, 0x7, 0x800, 0x6, 0x5, 0x80, 0x800000, 0x6, 0x3, 0x3, 0x8, 0x3], [0x9, 0x2, 0x6b74, 0xd789, 0xdd5, 0x5, 0x4, 0x401, 0x43dd, 0xffffff01, 0xfffffffd, 0x9, 0x5, 0x5, 0x39, 0x20000000, 0x3, 0x3, 0x6, 0xa07, 0x2, 0x6, 0x6554, 0x3e, 0x6, 0xb71, 0xffffff93, 0xfff, 0x7, 0x0, 0x1c59, 0x1, 0x1, 0x8, 0x10000, 0x6, 0x0, 0xd155, 0xffffffff, 0x6, 0x1, 0x5, 0x9, 0x8, 0xce3, 0x4, 0x3e6, 0x7, 0x1, 0x0, 0x40, 0x9, 0x6, 0x9, 0x8, 0x4, 0x9, 0x10000000, 0x0, 0x3, 0x4, 0x7fff, 0x7, 0x5], [0x8, 0xfff, 0x1, 0x8, 0x3, 0x2733, 0x3, 0x5, 0x20, 0x5f, 0x8001, 0xffff, 0x9, 0xfffffc01, 0x45a, 0x7, 0x9, 0x3f, 0x0, 0x9, 0x8ab, 0x7, 0x3ff, 0x9, 0x800, 0x5, 0x9, 0x4, 0x3f, 0x7ff, 0x5, 0x6, 0x2, 0x80000001, 0x26, 0x8, 0x8, 0xff, 0x1, 0x20, 0x4, 0x1, 0x2, 0x444, 0x7fffffff, 0x1, 0x0, 0x2, 0x80000000, 0x4f67, 0x1, 0x4, 0x0, 0x10000, 0x5, 0x4, 0x2, 0x9c17, 0x58, 0x8000, 0x1000, 0x800, 0x8, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000180))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000040)=0x9)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000680)={0x10})

[ 1115.429889] input: syz1 as /devices/virtual/input/input11517
[ 1115.460312] input: syz0 as /devices/virtual/input/input11518
18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x13cc, 0x100})

18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"bac90959558d297127f4ff412e84772a4cfe72e7f33e9e12eb5427d35e6b", 0x3, 0x0, 0x401, 0x200, 0x8, 0x16, 0x200, 0x0, [0xfff, 0x6dcd873e, 0x800, 0x80000001, 0x40, 0xffffffe0, 0x3ff, 0x7fffffff, 0x7fff, 0x5, 0x2, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x80000000, 0x2e94, 0x3]})
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1115.509329] input: syz1 as /devices/virtual/input/input11521
[ 1115.518336] input: syz1 as /devices/virtual/input/input11522
[ 1115.537951] input: syz1 as /devices/virtual/input/input11524
18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x8, 0x7, {0x51, 0x3, 0x6, {0x0, 0x3e}, {0x9}, @ramp={0x1000, 0x3, {0x3f8, 0x2, 0x5, 0x80}}}, {0x53, 0x7ff, 0x0, {0x4812, 0x6}, {0x394a, 0xde}, @rumble={0x6, 0x1}}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) (async, rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0xffffffff, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x2, 0x40, 0x6, 0x5, 0x3, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x57a, 0x5, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0xfffffffe, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x3, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (rerun: 64)

18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7fff, 0x94, &(0x7f0000000000)="60e01fb35156ab6ec3bff0399d1857c0fce10f8fc5cddc45cce30b8a23bf3d27510c83982a5c05b6fabb68f16ff05a99e9790f98cdfe07d828e39b5d170404e8b3a33831f23683f0a7c088d241c665a5117d6b11c4922e3fa2dec2e6b35bfb6acaad09160e3a3526c9f5ccfb8409ded4e55f09f618c9f1618a412e14c97d830471ea09485e23e25e618e7cd763272f92d1bd5d67", 0x4, 0x0, 0x400, 0x88, 0x1, 0x1, 0x0, 'syz1\x00'})

18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x400, 0x1000, 0x3}, 'syz0\x00', 0x2c}) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (rerun: 64)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz1\x00', {0x22, 0x8, 0xbe, 0xc000}, 0x34, [0x4, 0x0, 0x2, 0x10001, 0x4, 0x3, 0x3, 0x2, 0x1, 0x3, 0x7fff, 0x40, 0x3c4c, 0x2, 0x3, 0x10000, 0x18b, 0x1, 0x401, 0x101, 0x7, 0x0, 0x5, 0xaa, 0x200, 0x1, 0x5, 0xaf, 0x4b, 0x3fcd, 0xf7e, 0x2, 0xffff, 0x8, 0x687, 0xc0, 0xa8, 0x7, 0x3f, 0x4, 0x3, 0x100, 0x1000, 0x0, 0x10000, 0x8ae, 0x8, 0x8, 0xffffffff, 0x1, 0xdd, 0x80000001, 0xed7, 0x0, 0x2, 0x4, 0x4220, 0xffffffff, 0x80000000, 0x0, 0x83, 0x1, 0xf1, 0xcd], [0x7fff, 0x9, 0x81, 0x1e5, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x7fff, 0x1, 0x9, 0x80000001, 0x80000000, 0x5, 0x6, 0x7fffffff, 0x8000, 0x603, 0x20, 0x4, 0x1, 0x8, 0xd2, 0x8000, 0x4b, 0x1, 0x7fff, 0xfffffffe, 0xffffffff, 0x7d7a, 0x79, 0x5, 0x80, 0x0, 0x2, 0x6, 0x2a, 0x9cf4, 0x6, 0x5, 0x6, 0x100, 0x81, 0x8, 0x6, 0x7ff, 0x0, 0x7, 0x7, 0x800, 0x6, 0x5, 0x80, 0x800000, 0x6, 0x3, 0x3, 0x8, 0x3], [0x9, 0x2, 0x6b74, 0xd789, 0xdd5, 0x5, 0x4, 0x401, 0x43dd, 0xffffff01, 0xfffffffd, 0x9, 0x5, 0x5, 0x39, 0x20000000, 0x3, 0x3, 0x6, 0xa07, 0x2, 0x6, 0x6554, 0x3e, 0x6, 0xb71, 0xffffff93, 0xfff, 0x7, 0x0, 0x1c59, 0x1, 0x1, 0x8, 0x10000, 0x6, 0x0, 0xd155, 0xffffffff, 0x6, 0x1, 0x5, 0x9, 0x8, 0xce3, 0x4, 0x3e6, 0x7, 0x1, 0x0, 0x40, 0x9, 0x6, 0x9, 0x8, 0x4, 0x9, 0x10000000, 0x0, 0x3, 0x4, 0x7fff, 0x7, 0x5], [0x8, 0xfff, 0x1, 0x8, 0x3, 0x2733, 0x3, 0x5, 0x20, 0x5f, 0x8001, 0xffff, 0x9, 0xfffffc01, 0x45a, 0x7, 0x9, 0x3f, 0x0, 0x9, 0x8ab, 0x7, 0x3ff, 0x9, 0x800, 0x5, 0x9, 0x4, 0x3f, 0x7ff, 0x5, 0x6, 0x2, 0x80000001, 0x26, 0x8, 0x8, 0xff, 0x1, 0x20, 0x4, 0x1, 0x2, 0x444, 0x7fffffff, 0x1, 0x0, 0x2, 0x80000000, 0x4f67, 0x1, 0x4, 0x0, 0x10000, 0x5, 0x4, 0x2, 0x9c17, 0x58, 0x8000, 0x1000, 0x800, 0x8, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1115.567651] input: syz1 as /devices/virtual/input/input11526
18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x400, 0x1000, 0x3}, 'syz0\x00', 0x2c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz1\x00', {0x22, 0x8, 0xbe, 0xc000}, 0x34, [0x4, 0x0, 0x2, 0x10001, 0x4, 0x3, 0x3, 0x2, 0x1, 0x3, 0x7fff, 0x40, 0x3c4c, 0x2, 0x3, 0x10000, 0x18b, 0x1, 0x401, 0x101, 0x7, 0x0, 0x5, 0xaa, 0x200, 0x1, 0x5, 0xaf, 0x4b, 0x3fcd, 0xf7e, 0x2, 0xffff, 0x8, 0x687, 0xc0, 0xa8, 0x7, 0x3f, 0x4, 0x3, 0x100, 0x1000, 0x0, 0x10000, 0x8ae, 0x8, 0x8, 0xffffffff, 0x1, 0xdd, 0x80000001, 0xed7, 0x0, 0x2, 0x4, 0x4220, 0xffffffff, 0x80000000, 0x0, 0x83, 0x1, 0xf1, 0xcd], [0x7fff, 0x9, 0x81, 0x1e5, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x7fff, 0x1, 0x9, 0x80000001, 0x80000000, 0x5, 0x6, 0x7fffffff, 0x8000, 0x603, 0x20, 0x4, 0x1, 0x8, 0xd2, 0x8000, 0x4b, 0x1, 0x7fff, 0xfffffffe, 0xffffffff, 0x7d7a, 0x79, 0x5, 0x80, 0x0, 0x2, 0x6, 0x2a, 0x9cf4, 0x6, 0x5, 0x6, 0x100, 0x81, 0x8, 0x6, 0x7ff, 0x0, 0x7, 0x7, 0x800, 0x6, 0x5, 0x80, 0x800000, 0x6, 0x3, 0x3, 0x8, 0x3], [0x9, 0x2, 0x6b74, 0xd789, 0xdd5, 0x5, 0x4, 0x401, 0x43dd, 0xffffff01, 0xfffffffd, 0x9, 0x5, 0x5, 0x39, 0x20000000, 0x3, 0x3, 0x6, 0xa07, 0x2, 0x6, 0x6554, 0x3e, 0x6, 0xb71, 0xffffff93, 0xfff, 0x7, 0x0, 0x1c59, 0x1, 0x1, 0x8, 0x10000, 0x6, 0x0, 0xd155, 0xffffffff, 0x6, 0x1, 0x5, 0x9, 0x8, 0xce3, 0x4, 0x3e6, 0x7, 0x1, 0x0, 0x40, 0x9, 0x6, 0x9, 0x8, 0x4, 0x9, 0x10000000, 0x0, 0x3, 0x4, 0x7fff, 0x7, 0x5], [0x8, 0xfff, 0x1, 0x8, 0x3, 0x2733, 0x3, 0x5, 0x20, 0x5f, 0x8001, 0xffff, 0x9, 0xfffffc01, 0x45a, 0x7, 0x9, 0x3f, 0x0, 0x9, 0x8ab, 0x7, 0x3ff, 0x9, 0x800, 0x5, 0x9, 0x4, 0x3f, 0x7ff, 0x5, 0x6, 0x2, 0x80000001, 0x26, 0x8, 0x8, 0xff, 0x1, 0x20, 0x4, 0x1, 0x2, 0x444, 0x7fffffff, 0x1, 0x0, 0x2, 0x80000000, 0x4f67, 0x1, 0x4, 0x0, 0x10000, 0x5, 0x4, 0x2, 0x9c17, 0x58, 0x8000, 0x1000, 0x800, 0x8, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1115.640015] input: syz0 as /devices/virtual/input/input11528
[ 1115.658831] input: syz1 as /devices/virtual/input/input11529
[ 1115.669811] input: syz1 as /devices/virtual/input/input11531
18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"bac90959558d297127f4ff412e84772a4cfe72e7f33e9e12eb5427d35e6b", 0x3, 0x0, 0x401, 0x200, 0x8, 0x16, 0x200, 0x0, [0xfff, 0x6dcd873e, 0x800, 0x80000001, 0x40, 0xffffffe0, 0x3ff, 0x7fffffff, 0x7fff, 0x5, 0x2, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x80000000, 0x2e94, 0x3]})
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"bac90959558d297127f4ff412e84772a4cfe72e7f33e9e12eb5427d35e6b", 0x3, 0x0, 0x401, 0x200, 0x8, 0x16, 0x200, 0x0, [0xfff, 0x6dcd873e, 0x800, 0x80000001, 0x40, 0xffffffe0, 0x3ff, 0x7fffffff, 0x7fff, 0x5, 0x2, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x80000000, 0x2e94, 0x3]}) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

[ 1115.693619] input: syz1 as /devices/virtual/input/input11532
[ 1115.708237] input: syz0 as /devices/virtual/input/input11533
18:53:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x6, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x400, 0x1000, 0x3}, 'syz0\x00', 0x2c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) (async, rerun: 32)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async, rerun: 32)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz1\x00', {0x22, 0x8, 0xbe, 0xc000}, 0x34, [0x4, 0x0, 0x2, 0x10001, 0x4, 0x3, 0x3, 0x2, 0x1, 0x3, 0x7fff, 0x40, 0x3c4c, 0x2, 0x3, 0x10000, 0x18b, 0x1, 0x401, 0x101, 0x7, 0x0, 0x5, 0xaa, 0x200, 0x1, 0x5, 0xaf, 0x4b, 0x3fcd, 0xf7e, 0x2, 0xffff, 0x8, 0x687, 0xc0, 0xa8, 0x7, 0x3f, 0x4, 0x3, 0x100, 0x1000, 0x0, 0x10000, 0x8ae, 0x8, 0x8, 0xffffffff, 0x1, 0xdd, 0x80000001, 0xed7, 0x0, 0x2, 0x4, 0x4220, 0xffffffff, 0x80000000, 0x0, 0x83, 0x1, 0xf1, 0xcd], [0x7fff, 0x9, 0x81, 0x1e5, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x7fff, 0x1, 0x9, 0x80000001, 0x80000000, 0x5, 0x6, 0x7fffffff, 0x8000, 0x603, 0x20, 0x4, 0x1, 0x8, 0xd2, 0x8000, 0x4b, 0x1, 0x7fff, 0xfffffffe, 0xffffffff, 0x7d7a, 0x79, 0x5, 0x80, 0x0, 0x2, 0x6, 0x2a, 0x9cf4, 0x6, 0x5, 0x6, 0x100, 0x81, 0x8, 0x6, 0x7ff, 0x0, 0x7, 0x7, 0x800, 0x6, 0x5, 0x80, 0x800000, 0x6, 0x3, 0x3, 0x8, 0x3], [0x9, 0x2, 0x6b74, 0xd789, 0xdd5, 0x5, 0x4, 0x401, 0x43dd, 0xffffff01, 0xfffffffd, 0x9, 0x5, 0x5, 0x39, 0x20000000, 0x3, 0x3, 0x6, 0xa07, 0x2, 0x6, 0x6554, 0x3e, 0x6, 0xb71, 0xffffff93, 0xfff, 0x7, 0x0, 0x1c59, 0x1, 0x1, 0x8, 0x10000, 0x6, 0x0, 0xd155, 0xffffffff, 0x6, 0x1, 0x5, 0x9, 0x8, 0xce3, 0x4, 0x3e6, 0x7, 0x1, 0x0, 0x40, 0x9, 0x6, 0x9, 0x8, 0x4, 0x9, 0x10000000, 0x0, 0x3, 0x4, 0x7fff, 0x7, 0x5], [0x8, 0xfff, 0x1, 0x8, 0x3, 0x2733, 0x3, 0x5, 0x20, 0x5f, 0x8001, 0xffff, 0x9, 0xfffffc01, 0x45a, 0x7, 0x9, 0x3f, 0x0, 0x9, 0x8ab, 0x7, 0x3ff, 0x9, 0x800, 0x5, 0x9, 0x4, 0x3f, 0x7ff, 0x5, 0x6, 0x2, 0x80000001, 0x26, 0x8, 0x8, 0xff, 0x1, 0x20, 0x4, 0x1, 0x2, 0x444, 0x7fffffff, 0x1, 0x0, 0x2, 0x80000000, 0x4f67, 0x1, 0x4, 0x0, 0x10000, 0x5, 0x4, 0x2, 0x9c17, 0x58, 0x8000, 0x1000, 0x800, 0x8, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1115.738289] input: syz1 as /devices/virtual/input/input11535
[ 1115.746302] input: syz1 as /devices/virtual/input/input11534
18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7fff, 0x94, &(0x7f0000000000)="60e01fb35156ab6ec3bff0399d1857c0fce10f8fc5cddc45cce30b8a23bf3d27510c83982a5c05b6fabb68f16ff05a99e9790f98cdfe07d828e39b5d170404e8b3a33831f23683f0a7c088d241c665a5117d6b11c4922e3fa2dec2e6b35bfb6acaad09160e3a3526c9f5ccfb8409ded4e55f09f618c9f1618a412e14c97d830471ea09485e23e25e618e7cd763272f92d1bd5d67", 0x4, 0x0, 0x400, 0x88, 0x1, 0x1, 0x0, 'syz1\x00'})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7fff, 0x94, &(0x7f0000000000)="60e01fb35156ab6ec3bff0399d1857c0fce10f8fc5cddc45cce30b8a23bf3d27510c83982a5c05b6fabb68f16ff05a99e9790f98cdfe07d828e39b5d170404e8b3a33831f23683f0a7c088d241c665a5117d6b11c4922e3fa2dec2e6b35bfb6acaad09160e3a3526c9f5ccfb8409ded4e55f09f618c9f1618a412e14c97d830471ea09485e23e25e618e7cd763272f92d1bd5d67", 0x4, 0x0, 0x400, 0x88, 0x1, 0x1, 0x0, 'syz1\x00'}) (async)

[ 1115.796713] input: syz1 as /devices/virtual/input/input11536
[ 1115.829917] input: syz1 as /devices/virtual/input/input11537
18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x7, 0x1d}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x6, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x5, 0x7f, 0x2fce9da})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5)

[ 1115.847351] input: syz1 as /devices/virtual/input/input11538
[ 1115.879508] input: syz1 as /devices/virtual/input/input11539
18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1115.919179] input: syz1 as /devices/virtual/input/input11541
[ 1115.926128] input: syz0 as /devices/virtual/input/input11540
18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000140)={0x5, 0x4, 0x40400000})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x186)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0xb65, 0xa, &(0x7f0000000000)=[0x3, 0x1, 0x4, 0xfff, 0x6, 0x8dd, 0x1000, 0x829a, 0x8, 0x5], &(0x7f0000000040)=[0x2, 0x0, 0x4], &(0x7f0000000080)=[0x6, 0x869, 0x1, 0x2, 0xfe57, 0x9, 0x4, 0x1]})

18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7fff, 0x94, &(0x7f0000000000)="60e01fb35156ab6ec3bff0399d1857c0fce10f8fc5cddc45cce30b8a23bf3d27510c83982a5c05b6fabb68f16ff05a99e9790f98cdfe07d828e39b5d170404e8b3a33831f23683f0a7c088d241c665a5117d6b11c4922e3fa2dec2e6b35bfb6acaad09160e3a3526c9f5ccfb8409ded4e55f09f618c9f1618a412e14c97d830471ea09485e23e25e618e7cd763272f92d1bd5d67", 0x4, 0x0, 0x400, 0x88, 0x1, 0x1, 0x0, 'syz1\x00'})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7fff, 0x94, &(0x7f0000000000)="60e01fb35156ab6ec3bff0399d1857c0fce10f8fc5cddc45cce30b8a23bf3d27510c83982a5c05b6fabb68f16ff05a99e9790f98cdfe07d828e39b5d170404e8b3a33831f23683f0a7c088d241c665a5117d6b11c4922e3fa2dec2e6b35bfb6acaad09160e3a3526c9f5ccfb8409ded4e55f09f618c9f1618a412e14c97d830471ea09485e23e25e618e7cd763272f92d1bd5d67", 0x4, 0x0, 0x400, 0x88, 0x1, 0x1, 0x0, 'syz1\x00'}) (async)

18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x5, 0x7f, 0x2fce9da})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1115.962781] input: syz1 as /devices/virtual/input/input11542
[ 1115.979692] input: syz1 as /devices/virtual/input/input11543
[ 1115.989537] input: syz1 as /devices/virtual/input/input11544
[ 1115.998782] input: syz1 as /devices/virtual/input/input11545
18:53:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x6, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x6, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) (async)

[ 1116.037532] input: syz1 as /devices/virtual/input/input11546
[ 1116.073746] input: syz0 as /devices/virtual/input/input11547
18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xe, 0x1f, {0x55, 0x7200, 0x80, {0x7, 0x5}, {0x8f3, 0x20}, @cond=[{0x0, 0x4, 0x6f13, 0x3, 0x7fff, 0x401}, {0x8, 0x101, 0x9, 0x6, 0x101, 0x5}]}, {0x55, 0xffff, 0x7, {0x9, 0x6}, {0xd5a, 0x8}, @cond=[{0xf000, 0xff, 0x40, 0xffff, 0x6, 0x101}, {0xfff, 0x3f, 0x0, 0x5, 0x7f, 0x88}]}})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
socketpair(0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x5, 0x7f, 0x2fce9da})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x5, 0x7f, 0x2fce9da}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.104083] input: syz1 as /devices/virtual/input/input11548
[ 1116.127121] input: syz1 as /devices/virtual/input/input11549
[ 1116.129267] input: syz1 as /devices/virtual/input/input11550
[ 1116.140669] input: syz1 as /devices/virtual/input/input11551
18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5)

18:53:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11400, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x81, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x4, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x9, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))

[ 1116.199541] input: syz1 as /devices/virtual/input/input11552
[ 1116.228008] input: syz0 as /devices/virtual/input/input11554
[ 1116.229591] input: syz1 as /devices/virtual/input/input11553
18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.251644] input: syz1 as /devices/virtual/input/input11555
18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.292530] input: syz1 as /devices/virtual/input/input11556
[ 1116.305138] input: syz1 as /devices/virtual/input/input11557
[ 1116.320418] input: syz1 as /devices/virtual/input/input11559
[ 1116.337265] input: syz1 as /devices/virtual/input/input11560
18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10)

18:53:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0xe57, 0x4, 0x55ec, 0x8}, 'syz0\x00', 0x55})

18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:20 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11400, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x81, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x4, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x9, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11400, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x81, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x4, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x9, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.356503] input: syz1 as /devices/virtual/input/input11561
18:53:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.409159] input: syz1 as /devices/virtual/input/input11562
[ 1116.422463] input: syz1 as /devices/virtual/input/input11563
[ 1116.425788] input: syz1 as /devices/virtual/input/input11564
[ 1116.446484] input: syz0 as /devices/virtual/input/input11565
18:53:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async, rerun: 32)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10)

18:53:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000000)=""/38)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.456161] input: syz1 as /devices/virtual/input/input11567
18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:21 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (fail_nth: 1)

18:53:21 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11400, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x81, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x4, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x9, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000000)=""/38)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10)

18:53:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

[ 1116.540908] input: syz1 as /devices/virtual/input/input11569
[ 1116.546764] input: syz0 as /devices/virtual/input/input11570
[ 1116.559726] input: syz1 as /devices/virtual/input/input11571
[ 1116.577767] input: syz1 as /devices/virtual/input/input11574
18:53:21 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xdeaa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x9f80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65d], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x100000, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0xffffdb03, 0x0, 0x7ff, 0x0, 0x400000, 0x9, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:21 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x1)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

18:53:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000000)=""/38) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.637704] input: syz0 as /devices/virtual/input/input11575
18:53:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0xfffc}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xff, 0x1, 0x9})
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x6, 0x79f, 0x7})

18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
getitimer(0x2, &(0x7f0000000000))
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0xd, 0x1, 0x4})
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.680221] input: syz1 as /devices/virtual/input/input11577
[ 1116.684728] input: syz1 as /devices/virtual/input/input11578
[ 1116.693189] input: syz1 as /devices/virtual/input/input11579
[ 1116.703521] input: syz1 as /devices/virtual/input/input11580
18:53:21 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xdeaa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x9f80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65d], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x100000, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0xffffdb03, 0x0, 0x7ff, 0x0, 0x400000, 0x9, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:21 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x1) (async)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

18:53:21 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1116.760855] input: syz0 as /devices/virtual/input/input11582
[ 1116.761857] input: syz1 as /devices/virtual/input/input11583
[ 1116.776607] input: syz1 as /devices/virtual/input/input11584
18:53:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0xfffc}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xff, 0x1, 0x9}) (async)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x6, 0x79f, 0x7})

18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async, rerun: 32)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
getitimer(0x2, &(0x7f0000000000)) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0xd, 0x1, 0x4}) (async, rerun: 64)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) (rerun: 64)

18:53:21 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x1)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

[ 1116.847636] input: syz1 as /devices/virtual/input/input11585
[ 1116.861087] input: syz0 as /devices/virtual/input/input11586
[ 1116.872858] input: syz1 as /devices/virtual/input/input11587
18:53:21 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xdeaa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x9f80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65d], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x100000, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0xffffdb03, 0x0, 0x7ff, 0x0, 0x400000, 0x9, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xdeaa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x9f80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3], 0x1}) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65d], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x100000, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0xffffdb03, 0x0, 0x7ff, 0x0, 0x400000, 0x9, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:21 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) (async, rerun: 32)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (rerun: 32)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
getitimer(0x2, &(0x7f0000000000))
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0xd, 0x1, 0x4})
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
getitimer(0x2, &(0x7f0000000000)) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0xd, 0x1, 0x4}) (async)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) (async)

18:53:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0xfffc}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xff, 0x1, 0x9}) (async)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x6, 0x79f, 0x7})

[ 1116.899920] input: syz1 as /devices/virtual/input/input11590
[ 1116.903933] input: syz1 as /devices/virtual/input/input11588
[ 1116.937453] input: syz1 as /devices/virtual/input/input11591
18:53:21 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:21 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x220, 0x704], 0x2, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1116.967598] input: syz1 as /devices/virtual/input/input11592
18:53:21 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, 0x0, 0x0)

[ 1117.010443] input: syz1 as /devices/virtual/input/input11594
[ 1117.019098] input: syz1 as /devices/virtual/input/input11595
18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))

18:53:21 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x220, 0x704], 0x2, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:21 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, 0x0, 0x0)

18:53:21 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x62)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

[ 1117.068302] input: syz1 as /devices/virtual/input/input11596
[ 1117.081080] input: syz1 as /devices/virtual/input/input11597
[ 1117.089038] input: syz1 as /devices/virtual/input/input11598
[ 1117.101732] input: syz0 as /devices/virtual/input/input11599
18:53:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100))
write$input_event(r1, &(0x7f0000000040)={{r2, r3/1000+60000}, 0x12, 0xfff9, 0x40}, 0x18)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000000180)={0x3, 0x7e, "aaeba167c67caaae328e628ca6f106c9ea12f6bd527eaad055ade7248d4e49078ebddeb61ebb8f08b5d1371c741f4af61b1a97f74b57ffa162b5bb37a4e048a44da3546906f766522c51aecabc066ee249c64be86da5e057ff900d6f635b0541021c5360ee106c00620f2049da4d8c4ca3b9bc9b7a5a8f02ac8f7677c881"})
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x7)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r6, 0x5501)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xf)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2c)

18:53:21 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040)) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x62)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

[ 1117.153752] input: syz1 as /devices/virtual/input/input11600
[ 1117.170644] input: syz1 as /devices/virtual/input/input11601
[ 1117.192394] input: syz1 as /devices/virtual/input/input11602
18:53:21 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:21 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x220, 0x704], 0x2, 0x80800, 0x0, <r0=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x220, 0x704], 0x2, 0x80800}) (async)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))

[ 1117.211914] input: syz1 as /devices/virtual/input/input11603
[ 1117.249769] input: syz1 as /devices/virtual/input/input11604
18:53:21 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x62) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, 0x0, 0x0)

18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0) (async)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) (async)

18:53:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100)) (async, rerun: 64)
write$input_event(r1, &(0x7f0000000040)={{r2, r3/1000+60000}, 0x12, 0xfff9, 0x40}, 0x18)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000000180)={0x3, 0x7e, "aaeba167c67caaae328e628ca6f106c9ea12f6bd527eaad055ade7248d4e49078ebddeb61ebb8f08b5d1371c741f4af61b1a97f74b57ffa162b5bb37a4e048a44da3546906f766522c51aecabc066ee249c64be86da5e057ff900d6f635b0541021c5360ee106c00620f2049da4d8c4ca3b9bc9b7a5a8f02ac8f7677c881"}) (async)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x7) (async, rerun: 64)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async, rerun: 32)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xf) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3}) (async, rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) (async, rerun: 64)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2c)

[ 1117.257535] input: syz0 as /devices/virtual/input/input11605
[ 1117.278074] input: syz1 as /devices/virtual/input/input11606
[ 1117.323309] input: syz1 as /devices/virtual/input/input11607
[ 1117.345621] input: syz1 as /devices/virtual/input/input11608
[ 1117.355348] input: syz1 as /devices/virtual/input/input11609
18:53:21 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
write$input_event(r1, &(0x7f0000000000)={{}, 0x3, 0xfff9, 0x2}, 0x18)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:21 executing program 1:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x208000)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000100))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000400f43427394bab97748fc4a6309049bc61f372d930b866c4645fa5b28ee6fa93ed1ee8d7cd7a8a2679fa766227a91f48d56cda41dd791db183f1f9a8812e438ce6a1c0892dbd18cb7e45ca24d25b8dd1665252f64053726bf8ddf4781401bdfde9b8830268cc072131801c666d5a6d0fa37cdc17a7dc7e32442521e850ed427de5178c4a9b47b61cc08f9e40be2417c9", @ANYRES16=r1, @ANYBLOB="00000000000000000325070000000800110000000000050005000100000008000a000400000008000a000000000005000600080000000800190000000000060001000b0000000500210000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x73)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1117.373210] input: syz1 as /devices/virtual/input/input11611
[ 1117.388881] input: syz0 as /devices/virtual/input/input11610
18:53:21 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x167)

18:53:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x73)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x73) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)

18:53:21 executing program 1:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x208000)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000100))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000400f43427394bab97748fc4a6309049bc61f372d930b866c4645fa5b28ee6fa93ed1ee8d7cd7a8a2679fa766227a91f48d56cda41dd791db183f1f9a8812e438ce6a1c0892dbd18cb7e45ca24d25b8dd1665252f64053726bf8ddf4781401bdfde9b8830268cc072131801c666d5a6d0fa37cdc17a7dc7e32442521e850ed427de5178c4a9b47b61cc08f9e40be2417c9", @ANYRES16=r1, @ANYBLOB="00000000000000000325070000000800110000000000050005000100000008000a000400000008000a000000000005000600080000000800190000000000060001000b0000000500210000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x208000) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000100)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000400f43427394bab97748fc4a6309049bc61f372d930b866c4645fa5b28ee6fa93ed1ee8d7cd7a8a2679fa766227a91f48d56cda41dd791db183f1f9a8812e438ce6a1c0892dbd18cb7e45ca24d25b8dd1665252f64053726bf8ddf4781401bdfde9b8830268cc072131801c666d5a6d0fa37cdc17a7dc7e32442521e850ed427de5178c4a9b47b61cc08f9e40be2417c9", @ANYRES16=r1, @ANYBLOB="00000000000000000325070000000800110000000000050005000100000008000a000400000008000a000000000005000600080000000800190000000000060001000b0000000500210000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

18:53:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100))
write$input_event(r1, &(0x7f0000000040)={{r2, r3/1000+60000}, 0x12, 0xfff9, 0x40}, 0x18)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000000180)={0x3, 0x7e, "aaeba167c67caaae328e628ca6f106c9ea12f6bd527eaad055ade7248d4e49078ebddeb61ebb8f08b5d1371c741f4af61b1a97f74b57ffa162b5bb37a4e048a44da3546906f766522c51aecabc066ee249c64be86da5e057ff900d6f635b0541021c5360ee106c00620f2049da4d8c4ca3b9bc9b7a5a8f02ac8f7677c881"})
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x7)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r6, 0x5501)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xf)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100)) (async)
write$input_event(r1, &(0x7f0000000040)={{r2, r3/1000+60000}, 0x12, 0xfff9, 0x40}, 0x18) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000000180)={0x3, 0x7e, "aaeba167c67caaae328e628ca6f106c9ea12f6bd527eaad055ade7248d4e49078ebddeb61ebb8f08b5d1371c741f4af61b1a97f74b57ffa162b5bb37a4e048a44da3546906f766522c51aecabc066ee249c64be86da5e057ff900d6f635b0541021c5360ee106c00620f2049da4d8c4ca3b9bc9b7a5a8f02ac8f7677c881"}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x7) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xf) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2c) (async)

[ 1117.443217] input: syz1 as /devices/virtual/input/input11613
[ 1117.471481] input: syz1 as /devices/virtual/input/input11614
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
write$input_event(r1, &(0x7f0000000000)={{}, 0x3, 0xfff9, 0x2}, 0x18) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00'}, 0x45c)

18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 32)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x167)

18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x73)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x73) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)

[ 1117.494346] input: syz1 as /devices/virtual/input/input11615
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
write$input_event(r1, &(0x7f0000000000)={{}, 0x3, 0xfff9, 0x2}, 0x18)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
write$input_event(r1, &(0x7f0000000000)={{}, 0x3, 0xfff9, 0x2}, 0x18) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:22 executing program 1:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x208000)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000100))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000400f43427394bab97748fc4a6309049bc61f372d930b866c4645fa5b28ee6fa93ed1ee8d7cd7a8a2679fa766227a91f48d56cda41dd791db183f1f9a8812e438ce6a1c0892dbd18cb7e45ca24d25b8dd1665252f64053726bf8ddf4781401bdfde9b8830268cc072131801c666d5a6d0fa37cdc17a7dc7e32442521e850ed427de5178c4a9b47b61cc08f9e40be2417c9", @ANYRES16=r1, @ANYBLOB="00000000000000000325070000000800110000000000050005000100000008000a000400000008000a000000000005000600080000000800190000000000060001000b0000000500210000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x208000) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000100)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000400f43427394bab97748fc4a6309049bc61f372d930b866c4645fa5b28ee6fa93ed1ee8d7cd7a8a2679fa766227a91f48d56cda41dd791db183f1f9a8812e438ce6a1c0892dbd18cb7e45ca24d25b8dd1665252f64053726bf8ddf4781401bdfde9b8830268cc072131801c666d5a6d0fa37cdc17a7dc7e32442521e850ed427de5178c4a9b47b61cc08f9e40be2417c9", @ANYRES16=r1, @ANYBLOB="00000000000000000325070000000800110000000000050005000100000008000a000400000008000a000000000005000600080000000800190000000000060001000b0000000500210000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

[ 1117.555621] input: syz0 as /devices/virtual/input/input11617
[ 1117.556388] input: syz1 as /devices/virtual/input/input11618
[ 1117.581498] input: syz1 as /devices/virtual/input/input11619
18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x167)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x167) (async)

[ 1117.605212] input: syz1 as /devices/virtual/input/input11621
18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x0, 0x2710}, 0x15, 0x1ff, 0x10001}, 0x18)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xf2c, <r1=>0x0, 0x10000})
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0))
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000180)={r1, 0x2})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x7, 0x4, {0x57, 0x101, 0x2, {0xf924, 0x7}, {0xac, 0x81}, @ramp={0x9, 0x5, {0xffff, 0x6, 0x400, 0x3}}}, {0x52, 0x4, 0x1, {0x7269, 0x3}, {0x2, 0x6}, @cond=[{0x1, 0x52, 0x7, 0x2, 0x4, 0x8}, {0x200, 0xffff, 0x62c, 0x8, 0x2, 0x4}]}})

18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00'}, 0x45c)

18:53:22 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x9, 0x40, 0x1, 0x400], 0x5, 0x180000, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x278)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x59)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x60000, 0x981, 0x0, 0x5, 0x1, 0x10000, 0x0, 0x6], 0x8, 0x7d977694d7e098f1})

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000040)={"8671d48edaff8b243f1a7ecf160ddc12e1b93753105ea6427f9e282fbc41", 0x1, 0x2, 0x0, 0x7, 0xfffff001, 0xe840, 0xfffffffe, 0x0, [0x5c, 0x101, 0x0, 0x6ae, 0xfffffffa, 0x38b7143, 0x8, 0x3, 0x1, 0x0, 0xee81, 0x4, 0x5, 0xffffff7f, 0x2, 0x30, 0x5, 0x6, 0x3ff]})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a00, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280))

[ 1117.651244] input: syz1 as /devices/virtual/input/input11622
[ 1117.668940] input: syz1 as /devices/virtual/input/input11623
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d5006d], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x0, 0x2710}, 0x15, 0x1ff, 0x10001}, 0x18)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xf2c, <r1=>0x0, 0x10000})
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0))
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000180)={r1, 0x2})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x7, 0x4, {0x57, 0x101, 0x2, {0xf924, 0x7}, {0xac, 0x81}, @ramp={0x9, 0x5, {0xffff, 0x6, 0x400, 0x3}}}, {0x52, 0x4, 0x1, {0x7269, 0x3}, {0x2, 0x6}, @cond=[{0x1, 0x52, 0x7, 0x2, 0x4, 0x8}, {0x200, 0xffff, 0x62c, 0x8, 0x2, 0x4}]}})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
write$input_event(r0, &(0x7f0000000000)={{0x0, 0x2710}, 0x15, 0x1ff, 0x10001}, 0x18) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xf2c, 0x0, 0x10000}) (async)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000180)={r1, 0x2}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x7, 0x4, {0x57, 0x101, 0x2, {0xf924, 0x7}, {0xac, 0x81}, @ramp={0x9, 0x5, {0xffff, 0x6, 0x400, 0x3}}}, {0x52, 0x4, 0x1, {0x7269, 0x3}, {0x2, 0x6}, @cond=[{0x1, 0x52, 0x7, 0x2, 0x4, 0x8}, {0x200, 0xffff, 0x62c, 0x8, 0x2, 0x4}]}}) (async)

[ 1117.711508] input: syz1 as /devices/virtual/input/input11624
[ 1117.733312] input: syz0 as /devices/virtual/input/input11625
[ 1117.752756] input: syz1 as /devices/virtual/input/input11626
18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00'}, 0x45c)

18:53:22 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x9, 0x40, 0x1, 0x400], 0x5, 0x180000, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x278)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x59)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x60000, 0x981, 0x0, 0x5, 0x1, 0x10000, 0x0, 0x6], 0x8, 0x7d977694d7e098f1})

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000040)={"8671d48edaff8b243f1a7ecf160ddc12e1b93753105ea6427f9e282fbc41", 0x1, 0x2, 0x0, 0x7, 0xfffff001, 0xe840, 0xfffffffe, 0x0, [0x5c, 0x101, 0x0, 0x6ae, 0xfffffffa, 0x38b7143, 0x8, 0x3, 0x1, 0x0, 0xee81, 0x4, 0x5, 0xffffff7f, 0x2, 0x30, 0x5, 0x6, 0x3ff]})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a00, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000040)={"8671d48edaff8b243f1a7ecf160ddc12e1b93753105ea6427f9e282fbc41", 0x1, 0x2, 0x0, 0x7, 0xfffff001, 0xe840, 0xfffffffe, 0x0, [0x5c, 0x101, 0x0, 0x6ae, 0xfffffffa, 0x38b7143, 0x8, 0x3, 0x1, 0x0, 0xee81, 0x4, 0x5, 0xffffff7f, 0x2, 0x30, 0x5, 0x6, 0x3ff]}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a00, 0x0) (async)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280)) (async)

18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d5006d], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d5006d], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

[ 1117.796656] input: syz1 as /devices/virtual/input/input11627
[ 1117.802230] input: syz1 as /devices/virtual/input/input11628
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000040)={"8671d48edaff8b243f1a7ecf160ddc12e1b93753105ea6427f9e282fbc41", 0x1, 0x2, 0x0, 0x7, 0xfffff001, 0xe840, 0xfffffffe, 0x0, [0x5c, 0x101, 0x0, 0x6ae, 0xfffffffa, 0x38b7143, 0x8, 0x3, 0x1, 0x0, 0xee81, 0x4, 0x5, 0xffffff7f, 0x2, 0x30, 0x5, 0x6, 0x3ff]})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a00, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000040)={"8671d48edaff8b243f1a7ecf160ddc12e1b93753105ea6427f9e282fbc41", 0x1, 0x2, 0x0, 0x7, 0xfffff001, 0xe840, 0xfffffffe, 0x0, [0x5c, 0x101, 0x0, 0x6ae, 0xfffffffa, 0x38b7143, 0x8, 0x3, 0x1, 0x0, 0xee81, 0x4, 0x5, 0xffffff7f, 0x2, 0x30, 0x5, 0x6, 0x3ff]}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a00, 0x0) (async)
ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280)) (async)

18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00'}, 0x45c)

[ 1117.849814] input: syz1 as /devices/virtual/input/input11629
[ 1117.872872] input: syz1 as /devices/virtual/input/input11631
[ 1117.886038] input: syz0 as /devices/virtual/input/input11630
18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x0, 0x2710}, 0x15, 0x1ff, 0x10001}, 0x18) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xf2c, <r1=>0x0, 0x10000}) (async)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0))
ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000180)={r1, 0x2})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x7, 0x4, {0x57, 0x101, 0x2, {0xf924, 0x7}, {0xac, 0x81}, @ramp={0x9, 0x5, {0xffff, 0x6, 0x400, 0x3}}}, {0x52, 0x4, 0x1, {0x7269, 0x3}, {0x2, 0x6}, @cond=[{0x1, 0x52, 0x7, 0x2, 0x4, 0x8}, {0x200, 0xffff, 0x62c, 0x8, 0x2, 0x4}]}})

18:53:22 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x9, 0x40, 0x1, 0x400], 0x5, 0x180000, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x278)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x59)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x60000, 0x981, 0x0, 0x5, 0x1, 0x10000, 0x0, 0x6], 0x8, 0x7d977694d7e098f1})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x9, 0x40, 0x1, 0x400], 0x5, 0x180000}) (async)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x278) (async)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x59) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x60000, 0x981, 0x0, 0x5, 0x1, 0x10000, 0x0, 0x6], 0x8, 0x7d977694d7e098f1}) (async)

18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d5006d], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async, rerun: 64)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (rerun: 64)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1117.921536] input: syz1 as /devices/virtual/input/input11633
[ 1117.944951] input: syz1 as /devices/virtual/input/input11632
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x8)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x1, 0x6, 0x4, 0x200}, 'syz0\x00', 0x12})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1117.984036] input: syz1 as /devices/virtual/input/input11634
[ 1117.991229] input: syz1 as /devices/virtual/input/input11635
[ 1117.996270] input: syz0 as /devices/virtual/input/input11636
18:53:22 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000000)=0xff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x151000, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040))
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x2)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, 0x0, 0x0)

18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x1, 0x6, 0x4, 0x200}, 'syz0\x00', 0x12}) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

[ 1118.061063] input: syz1 as /devices/virtual/input/input11638
[ 1118.068062] input: syz1 as /devices/virtual/input/input11637
[ 1118.094866] input: syz1 as /devices/virtual/input/input11639
[ 1118.103362] input: syz1 as /devices/virtual/input/input11640
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x4, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x82, 0x3, 0x9, 0x0, 0x3ff, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3)

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x8)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) (async)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x8) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

18:53:22 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000000)=0xff) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) (async)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, 0x0, 0x0)

[ 1118.132858] input: syz0 as /devices/virtual/input/input11641
[ 1118.160596] input: syz1 as /devices/virtual/input/input11643
[ 1118.172305] input: syz1 as /devices/virtual/input/input11644
18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x151000, 0x0) (rerun: 64)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) (async, rerun: 64)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x2) (async, rerun: 64)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (rerun: 64)

[ 1118.214003] input: syz1 as /devices/virtual/input/input11645
[ 1118.237455] input: syz0 as /devices/virtual/input/input11647
[ 1118.252174] input: syz0 as /devices/virtual/input/input11648
18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x1, 0x6, 0x4, 0x200}, 'syz0\x00', 0x12})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x1, 0x6, 0x4, 0x200}, 'syz0\x00', 0x12}) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)

18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x4, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x82, 0x3, 0x9, 0x0, 0x3ff, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3)

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x8) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:22 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async, rerun: 64)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000000)=0xff) (async, rerun: 64)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) (async)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1118.253862] input: syz1 as /devices/virtual/input/input11649
18:53:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))

18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x4, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x82, 0x3, 0x9, 0x0, 0x3ff, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async, rerun: 64)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (rerun: 64)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3)

[ 1118.320714] input: syz1 as /devices/virtual/input/input11651
[ 1118.331264] input: syz1 as /devices/virtual/input/input11652
18:53:22 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x46400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0xb50, 0xfffffffb, 0x40, 0xffffffffffffffff, 0x100000, '\x00', 0x0, r1, 0x5, 0x4, 0x4, 0x3}, 0x48)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:22 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0xa380)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0x2, 0x8, "30eb4629672b4fcae22d505c14e0f6421f10a7dc857ad7555f2e1aaa5c430ce7f84519f697123cd90c7eca03299c6d9f4a42bbd1f9b766f0a9696a45b921a8dc", "6527216a868c1cf5a2302608bd84608185b5209ded1f583f0164ffe079caecfad8e7a16df5b16308b17e7cbae185e0ea31a0a6dde8f5f484cfb1c180021d4d95", "cc3e7367f271edec6ca68bfc4cd810b27a28a4cc0c50eed0db9680fb8e62e9d9", [0x400, 0x5]})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)

[ 1118.377043] input: syz0 as /devices/virtual/input/input11653
[ 1118.384636] input: syz1 as /devices/virtual/input/input11655
18:53:22 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

18:53:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x151000, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040))
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x2)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x151000, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) (async)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x2) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

[ 1118.419937] input: syz1 as /devices/virtual/input/input11656
[ 1118.439871] input: syz1 as /devices/virtual/input/input11658
18:53:22 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x2, 0x7ff, 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x8, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0xffffffff, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3b)

18:53:23 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x62)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x46400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0xb50, 0xfffffffb, 0x40, 0xffffffffffffffff, 0x100000, '\x00', 0x0, r1, 0x5, 0x4, 0x4, 0x3}, 0x48) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:23 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0xa380)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0x2, 0x8, "30eb4629672b4fcae22d505c14e0f6421f10a7dc857ad7555f2e1aaa5c430ce7f84519f697123cd90c7eca03299c6d9f4a42bbd1f9b766f0a9696a45b921a8dc", "6527216a868c1cf5a2302608bd84608185b5209ded1f583f0164ffe079caecfad8e7a16df5b16308b17e7cbae185e0ea31a0a6dde8f5f484cfb1c180021d4d95", "cc3e7367f271edec6ca68bfc4cd810b27a28a4cc0c50eed0db9680fb8e62e9d9", [0x400, 0x5]})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)

18:53:23 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

[ 1118.491883] input: syz1 as /devices/virtual/input/input11659
[ 1118.508303] input: syz0 as /devices/virtual/input/input11660
[ 1118.522240] input: syz1 as /devices/virtual/input/input11661
18:53:23 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000040))
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0xff, 0x18001)
ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431)

18:53:23 executing program 3:
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

[ 1118.572490] input: syz1 as /devices/virtual/input/input11663
[ 1118.576990] input: syz1 as /devices/virtual/input/input11664
18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 64)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x2, 0x7ff, 0x2}) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x8, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0xffffffff, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3b)

18:53:23 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0xa380)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0x2, 0x8, "30eb4629672b4fcae22d505c14e0f6421f10a7dc857ad7555f2e1aaa5c430ce7f84519f697123cd90c7eca03299c6d9f4a42bbd1f9b766f0a9696a45b921a8dc", "6527216a868c1cf5a2302608bd84608185b5209ded1f583f0164ffe079caecfad8e7a16df5b16308b17e7cbae185e0ea31a0a6dde8f5f484cfb1c180021d4d95", "cc3e7367f271edec6ca68bfc4cd810b27a28a4cc0c50eed0db9680fb8e62e9d9", [0x400, 0x5]}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)

18:53:23 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x46400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0xb50, 0xfffffffb, 0x40, 0xffffffffffffffff, 0x100000, '\x00', 0x0, r1, 0x5, 0x4, 0x4, 0x3}, 0x48) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

[ 1118.636134] input: syz0 as /devices/virtual/input/input11665
[ 1118.648389] input: syz1 as /devices/virtual/input/input11666
[ 1118.656377] input: syz1 as /devices/virtual/input/input11667
[ 1118.662739] input: syz0 as /devices/virtual/input/input11668
18:53:23 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000040))
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0xff, 0x18001)
ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431)

18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000000)=""/38)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x2, 0x7ff, 0x2}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x8, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0xffffffff, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3b)

18:53:23 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x35d, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

[ 1118.729339] input: syz1 as /devices/virtual/input/input11669
[ 1118.744744] input: syz0 as /devices/virtual/input/input11670
[ 1118.768231] input: syz1 as /devices/virtual/input/input11671
18:53:23 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x3555, 0x60000000, 0x8000], 0x1})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x8da7, 0x880)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x5, 0x5, 0x9, 0x6, 0x80, 0x7fff, 0xe2a], 0x7, 0x80000})

18:53:23 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000040)) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0xff, 0x18001)
ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431)

18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:23 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x35d, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x35d, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

[ 1118.811990] input: syz0 as /devices/virtual/input/input11672
[ 1118.823615] input: syz1 as /devices/virtual/input/input11673
[ 1118.841175] input: syz1 as /devices/virtual/input/input11674
18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (fail_nth: 1)

18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)

[ 1118.898975] input: syz0 as /devices/virtual/input/input11675
[ 1118.917957] input: syz1 as /devices/virtual/input/input11676
18:53:23 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x3555, 0x60000000, 0x8000], 0x1})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x8da7, 0x880)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x5, 0x5, 0x9, 0x6, 0x80, 0x7fff, 0xe2a], 0x7, 0x80000})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x3555, 0x60000000, 0x8000], 0x1}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x8da7, 0x880) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x5, 0x5, 0x9, 0x6, 0x80, 0x7fff, 0xe2a], 0x7, 0x80000}) (async)

18:53:23 executing program 0:
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x7fffffff, 0xfffffffd})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

[ 1118.939910] input: syz1 as /devices/virtual/input/input11677
[ 1118.959420] input: syz1 as /devices/virtual/input/input11678
18:53:23 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x35d, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x0, 0x0, 0x9})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)

18:53:23 executing program 0:
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x7fffffff, 0xfffffffd}) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

[ 1118.989540] input: syz1 as /devices/virtual/input/input11679
[ 1119.009906] input: syz1 as /devices/virtual/input/input11680
[ 1119.020184] input: syz0 as /devices/virtual/input/input11681
18:53:23 executing program 1:
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001540)=ANY=[@ANYBLOB="060000006f000000a08799e9067c4d912fc54c95d905ef39c3346858279b1317ced194aaf63f1296a72aa35ca8c9e22570a8ef4e3d3a8c506055766ec2d347ef2703b9daf7d4e1d1c233dbde3a7c15c437836c30207815142585e67ad1791fb474ffe518fab6061ff9218f81640c562ac28003cfd256c1e364e2e7c59eb2863a51b0a24850e556b9060000002a0e128b9a04d4e93a09652433f5800800c45ca684ed9c764060"])
syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffc, 0xc1a1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x4a}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb}, {0xa, 0x3}, {0x9}, {0x2, 0x1}, {0xf, 0x2}, {0xd, 0x1}, {0xc, 0x4}, {0x10, 0x5}]}]}, {0x0, [0x30, 0x2e, 0x51, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000340)=""/4096, 0x8c, 0x1000}, 0x20)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001440)=0x6)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000001380)={0x42, 0x9c, "0d718fba283aaa20629d695553df6fcfc37043159315a1caf88d7eb24d5b37d2f184e1471fd1c0976fbae64c2fade090c6728b4d6bc44e5b1a7d3da010e38a80913a3508fee48d4cba6ad8bc4548a070c96bf1fc7eca2f5b956767e52089591bd917566d0ec7a4939a7963c4b15e735b97f81c36b500362757cd3f80a0d998f9d2a61afc697dbf8c3e9f3d7418eac4276fa9cc5ae37e8593cb21e8e5"})
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000001340))
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x40, 0x1f, 0x656, 0x80000001, 0x8, 0x6, 0x9})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000100))

18:53:23 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x3555, 0x60000000, 0x8000], 0x1}) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x8da7, 0x880)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x5, 0x5, 0x9, 0x6, 0x80, 0x7fff, 0xe2a], 0x7, 0x80000})

18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x0, 0x0, 0x9})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x0, 0x0, 0x9}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)

[ 1119.073328] input: syz1 as /devices/virtual/input/input11682
[ 1119.083441] input: syz1 as /devices/virtual/input/input11683
[ 1119.106446] input: syz1 as /devices/virtual/input/input11684
18:53:23 executing program 1:
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001540)=ANY=[@ANYBLOB="060000006f000000a08799e9067c4d912fc54c95d905ef39c3346858279b1317ced194aaf63f1296a72aa35ca8c9e22570a8ef4e3d3a8c506055766ec2d347ef2703b9daf7d4e1d1c233dbde3a7c15c437836c30207815142585e67ad1791fb474ffe518fab6061ff9218f81640c562ac28003cfd256c1e364e2e7c59eb2863a51b0a24850e556b9060000002a0e128b9a04d4e93a09652433f5800800c45ca684ed9c764060"])
syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffc, 0xc1a1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x4a}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb}, {0xa, 0x3}, {0x9}, {0x2, 0x1}, {0xf, 0x2}, {0xd, 0x1}, {0xc, 0x4}, {0x10, 0x5}]}]}, {0x0, [0x30, 0x2e, 0x51, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000340)=""/4096, 0x8c, 0x1000}, 0x20)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001440)=0x6)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000001380)={0x42, 0x9c, "0d718fba283aaa20629d695553df6fcfc37043159315a1caf88d7eb24d5b37d2f184e1471fd1c0976fbae64c2fade090c6728b4d6bc44e5b1a7d3da010e38a80913a3508fee48d4cba6ad8bc4548a070c96bf1fc7eca2f5b956767e52089591bd917566d0ec7a4939a7963c4b15e735b97f81c36b500362757cd3f80a0d998f9d2a61afc697dbf8c3e9f3d7418eac4276fa9cc5ae37e8593cb21e8e5"})
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000001340))
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x40, 0x1f, 0x656, 0x80000001, 0x8, 0x6, 0x9})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000100))
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001540)=ANY=[@ANYBLOB="060000006f000000a08799e9067c4d912fc54c95d905ef39c3346858279b1317ced194aaf63f1296a72aa35ca8c9e22570a8ef4e3d3a8c506055766ec2d347ef2703b9daf7d4e1d1c233dbde3a7c15c437836c30207815142585e67ad1791fb474ffe518fab6061ff9218f81640c562ac28003cfd256c1e364e2e7c59eb2863a51b0a24850e556b9060000002a0e128b9a04d4e93a09652433f5800800c45ca684ed9c764060"]) (async)
syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffc, 0xc1a1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x4a}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb}, {0xa, 0x3}, {0x9}, {0x2, 0x1}, {0xf, 0x2}, {0xd, 0x1}, {0xc, 0x4}, {0x10, 0x5}]}]}, {0x0, [0x30, 0x2e, 0x51, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000340)=""/4096, 0x8c, 0x1000}, 0x20) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001440)=0x6) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000001380)={0x42, 0x9c, "0d718fba283aaa20629d695553df6fcfc37043159315a1caf88d7eb24d5b37d2f184e1471fd1c0976fbae64c2fade090c6728b4d6bc44e5b1a7d3da010e38a80913a3508fee48d4cba6ad8bc4548a070c96bf1fc7eca2f5b956767e52089591bd917566d0ec7a4939a7963c4b15e735b97f81c36b500362757cd3f80a0d998f9d2a61afc697dbf8c3e9f3d7418eac4276fa9cc5ae37e8593cb21e8e5"}) (async)
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000001340)) (async)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x40, 0x1f, 0x656, 0x80000001, 0x8, 0x6, 0x9}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000100)) (async)

18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) (async)

18:53:23 executing program 0:
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x7fffffff, 0xfffffffd}) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

[ 1119.143389] input: syz1 as /devices/virtual/input/input11685
18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x0, 0x0, 0x9})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x0, 0x0, 0x9}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:23 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1119.197642] input: syz1 as /devices/virtual/input/input11687
18:53:23 executing program 1:
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001540)=ANY=[@ANYBLOB="060000006f000000a08799e9067c4d912fc54c95d905ef39c3346858279b1317ced194aaf63f1296a72aa35ca8c9e22570a8ef4e3d3a8c506055766ec2d347ef2703b9daf7d4e1d1c233dbde3a7c15c437836c30207815142585e67ad1791fb474ffe518fab6061ff9218f81640c562ac28003cfd256c1e364e2e7c59eb2863a51b0a24850e556b9060000002a0e128b9a04d4e93a09652433f5800800c45ca684ed9c764060"])
syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffc, 0xc1a1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x4a}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb}, {0xa, 0x3}, {0x9}, {0x2, 0x1}, {0xf, 0x2}, {0xd, 0x1}, {0xc, 0x4}, {0x10, 0x5}]}]}, {0x0, [0x30, 0x2e, 0x51, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000340)=""/4096, 0x8c, 0x1000}, 0x20)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001440)=0x6)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000001380)={0x42, 0x9c, "0d718fba283aaa20629d695553df6fcfc37043159315a1caf88d7eb24d5b37d2f184e1471fd1c0976fbae64c2fade090c6728b4d6bc44e5b1a7d3da010e38a80913a3508fee48d4cba6ad8bc4548a070c96bf1fc7eca2f5b956767e52089591bd917566d0ec7a4939a7963c4b15e735b97f81c36b500362757cd3f80a0d998f9d2a61afc697dbf8c3e9f3d7418eac4276fa9cc5ae37e8593cb21e8e5"})
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000001340))
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x40, 0x1f, 0x656, 0x80000001, 0x8, 0x6, 0x9})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000100))
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001540)=ANY=[@ANYBLOB="060000006f000000a08799e9067c4d912fc54c95d905ef39c3346858279b1317ced194aaf63f1296a72aa35ca8c9e22570a8ef4e3d3a8c506055766ec2d347ef2703b9daf7d4e1d1c233dbde3a7c15c437836c30207815142585e67ad1791fb474ffe518fab6061ff9218f81640c562ac28003cfd256c1e364e2e7c59eb2863a51b0a24850e556b9060000002a0e128b9a04d4e93a09652433f5800800c45ca684ed9c764060"]) (async)
syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffc, 0xc1a1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x4a}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb}, {0xa, 0x3}, {0x9}, {0x2, 0x1}, {0xf, 0x2}, {0xd, 0x1}, {0xc, 0x4}, {0x10, 0x5}]}]}, {0x0, [0x30, 0x2e, 0x51, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000340)=""/4096, 0x8c, 0x1000}, 0x20) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001440)=0x6) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000001380)={0x42, 0x9c, "0d718fba283aaa20629d695553df6fcfc37043159315a1caf88d7eb24d5b37d2f184e1471fd1c0976fbae64c2fade090c6728b4d6bc44e5b1a7d3da010e38a80913a3508fee48d4cba6ad8bc4548a070c96bf1fc7eca2f5b956767e52089591bd917566d0ec7a4939a7963c4b15e735b97f81c36b500362757cd3f80a0d998f9d2a61afc697dbf8c3e9f3d7418eac4276fa9cc5ae37e8593cb21e8e5"}) (async)
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000001340)) (async)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x40, 0x1f, 0x656, 0x80000001, 0x8, 0x6, 0x9}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000100)) (async)

18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x2, 0x5081, 0x401}, 'syz0\x00', 0x39})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, r2, 0x0], &(0x7f0000000080)=[0x2, 0xa3cc, 0x3, 0x3cfe5652, 0xfffffffffffffffa], 0x4})

18:53:23 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$input_event(r0, &(0x7f0000000040)={{}, 0x2, 0x3, 0x2}, 0x18)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000000)={0x0, 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1119.254651] input: syz1 as /devices/virtual/input/input11689
[ 1119.279587] input: syz0 as /devices/virtual/input/input11690
[ 1119.286750] input: syz1 as /devices/virtual/input/input11691
18:53:23 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

[ 1119.310537] input: syz1 as /devices/virtual/input/input11692
18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3e)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:23 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x208740)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x4, {0x0, 0x0, 0x0, 0x0, 0x55b, 0x0, 0x6, 0x1, 0xc, "f0933346a52155476ab433e286f5fddefc36fa8cd561e0cc8a21444406bd877668a1882fa7ef9dbe4dc9d028f992c4218e14fa5300eef5b8b925eb3745b7e21f", "2b65d310fd270a95cd1e05a928e7e168d69086c388eb227fff988cb5335a60c16dc44754166e0063a64acfff5ca21cb03f85d3a762b6b12625ff860f319d0745", "b6f17e00a52fb8ce97180f2302129397916682e9610092e0188494340acbe766", [0x3, 0x100]}})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x80000001, 0x15, 0x17, 0x9, "e64ce996b7f522cb1a91c2b5d54da62a448aaeb51ac3177be672f7c26f73848a9fbd634056cb4ec1ed7d593e67631045445b0d3ca000b328f53d31ec59619082", "da62dc684ade5feec03d468718371312ca98d4d63e7f1ebee5520e71b7c6590e", [0x101, 0x7f]})

18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3a)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1f)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x10)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x400], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x10000]}, 0x45c)

[ 1119.352778] input: syz0 as /devices/virtual/input/input11693
[ 1119.376134] input: syz1 as /devices/virtual/input/input11694
18:53:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x2, 0x5081, 0x401}, 'syz0\x00', 0x39}) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={<r2=>0x0}) (rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, r2, 0x0], &(0x7f0000000080)=[0x2, 0xa3cc, 0x3, 0x3cfe5652, 0xfffffffffffffffa], 0x4})

18:53:23 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3e)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1119.407082] input: syz1 as /devices/virtual/input/input11695
18:53:23 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
write$input_event(r0, &(0x7f0000000040)={{}, 0x2, 0x3, 0x2}, 0x18) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000000)={0x0, 0x2}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3a) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1f) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x10) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x400], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x10000]}, 0x45c)

18:53:24 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x2, 0x5081, 0x401}, 'syz0\x00', 0x39})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, r2, 0x0], &(0x7f0000000080)=[0x2, 0xa3cc, 0x3, 0x3cfe5652, 0xfffffffffffffffa], 0x4})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x2, 0x5081, 0x401}, 'syz0\x00', 0x39}) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, r2, 0x0], &(0x7f0000000080)=[0x2, 0xa3cc, 0x3, 0x3cfe5652, 0xfffffffffffffffa], 0x4}) (async)

18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x208740)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x4, {0x0, 0x0, 0x0, 0x0, 0x55b, 0x0, 0x6, 0x1, 0xc, "f0933346a52155476ab433e286f5fddefc36fa8cd561e0cc8a21444406bd877668a1882fa7ef9dbe4dc9d028f992c4218e14fa5300eef5b8b925eb3745b7e21f", "2b65d310fd270a95cd1e05a928e7e168d69086c388eb227fff988cb5335a60c16dc44754166e0063a64acfff5ca21cb03f85d3a762b6b12625ff860f319d0745", "b6f17e00a52fb8ce97180f2302129397916682e9610092e0188494340acbe766", [0x3, 0x100]}}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x80000001, 0x15, 0x17, 0x9, "e64ce996b7f522cb1a91c2b5d54da62a448aaeb51ac3177be672f7c26f73848a9fbd634056cb4ec1ed7d593e67631045445b0d3ca000b328f53d31ec59619082", "da62dc684ade5feec03d468718371312ca98d4d63e7f1ebee5520e71b7c6590e", [0x101, 0x7f]})

18:53:24 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3e)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3e) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

[ 1119.457734] input: syz1 as /devices/virtual/input/input11697
[ 1119.477637] input: syz1 as /devices/virtual/input/input11698
[ 1119.490521] input: syz1 as /devices/virtual/input/input11699
18:53:24 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:24 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$input_event(r0, &(0x7f0000000040)={{}, 0x2, 0x3, 0x2}, 0x18)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000000)={0x0, 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:24 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0x200})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3a)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1f)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x10)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x400], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3a) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1f) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x10) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x400], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x10000]}, 0x45c) (async)

[ 1119.583077] input: syz1 as /devices/virtual/input/input11702
[ 1119.591760] input: syz0 as /devices/virtual/input/input11704
[ 1119.595718] input: syz1 as /devices/virtual/input/input11703
[ 1119.602717] input: syz1 as /devices/virtual/input/input11701
[ 1119.617138] input: syz1 as /devices/virtual/input/input11705
18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x208740)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x4, {0x0, 0x0, 0x0, 0x0, 0x55b, 0x0, 0x6, 0x1, 0xc, "f0933346a52155476ab433e286f5fddefc36fa8cd561e0cc8a21444406bd877668a1882fa7ef9dbe4dc9d028f992c4218e14fa5300eef5b8b925eb3745b7e21f", "2b65d310fd270a95cd1e05a928e7e168d69086c388eb227fff988cb5335a60c16dc44754166e0063a64acfff5ca21cb03f85d3a762b6b12625ff860f319d0745", "b6f17e00a52fb8ce97180f2302129397916682e9610092e0188494340acbe766", [0x3, 0x100]}}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x80000001, 0x15, 0x17, 0x9, "e64ce996b7f522cb1a91c2b5d54da62a448aaeb51ac3177be672f7c26f73848a9fbd634056cb4ec1ed7d593e67631045445b0d3ca000b328f53d31ec59619082", "da62dc684ade5feec03d468718371312ca98d4d63e7f1ebee5520e71b7c6590e", [0x101, 0x7f]})

18:53:24 executing program 4:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}}, 0x20000004)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x8, 0x3, 0xcd, 0x35f5, 0x4, 0x7f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x8, 0x1, 0xcb, 0x2b}, 'syz1\x00', 0x23})
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:24 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0x200})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0x200}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220041, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1f, 0x10, "407a222e5960614cade8e5f33e8296b7ca6c157b35c56d434cb313b90b5103074bfe0fa0c82c72bdf66856c9d2a488d463db303c9c474cebd6b4e28527f3fbee", "bfa5245b5db6b3b79ac623c8dc5da3709d02b09803f70781f5d390e8ca6efe13", [0xffffffff80000000, 0x80000000]})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x9], 0x2, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x10})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000200))
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080))
syz_open_dev$loop(&(0x7f0000000280), 0x8000000000000000, 0x4000)

[ 1119.728771] input: syz0 as /devices/virtual/input/input11706
[ 1119.737712] input: syz1 as /devices/virtual/input/input11707
[ 1119.747961] input: syz1 as /devices/virtual/input/input11708
[ 1119.753374] input: syz1 as /devices/virtual/input/input11709
[ 1119.759894] input: syz1 as /devices/virtual/input/input11710
18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x8f, 0x3, 0x9, 0x8, 0x7, 0x10000], 0x7, 0x800, 0x0, <r3=>0xffffffffffffffff})
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x22)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2)
socketpair(0x9, 0x5, 0x3, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x18}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40810)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000840)={0x11c, 0x62b36602, 0x1, 0x8, 0x1, 0x7fffffff})

18:53:24 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:24 executing program 4:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}}, 0x20000004)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x8, 0x3, 0xcd, 0x35f5, 0x4, 0x7f}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x8, 0x1, 0xcb, 0x2b}, 'syz1\x00', 0x23}) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2)

[ 1119.859382] input: syz1 as /devices/virtual/input/input11712
[ 1119.882602] input: syz1 as /devices/virtual/input/input11713
[ 1119.888387] input: syz1 as /devices/virtual/input/input11714
[ 1119.899113] input: syz0 as /devices/virtual/input/input11715
18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220041, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1f, 0x10, "407a222e5960614cade8e5f33e8296b7ca6c157b35c56d434cb313b90b5103074bfe0fa0c82c72bdf66856c9d2a488d463db303c9c474cebd6b4e28527f3fbee", "bfa5245b5db6b3b79ac623c8dc5da3709d02b09803f70781f5d390e8ca6efe13", [0xffffffff80000000, 0x80000000]}) (async)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x9], 0x2, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x10}) (async)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000200)) (async)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080)) (async)
syz_open_dev$loop(&(0x7f0000000280), 0x8000000000000000, 0x4000)

18:53:24 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0x200}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1119.900760] input: syz1 as /devices/virtual/input/input11716
[ 1119.917956] input: syz1 as /devices/virtual/input/input11717
18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x8f, 0x3, 0x9, 0x8, 0x7, 0x10000], 0x7, 0x800, 0x0, <r3=>0xffffffffffffffff})
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x22)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2)
socketpair(0x9, 0x5, 0x3, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x18}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40810)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000840)={0x11c, 0x62b36602, 0x1, 0x8, 0x1, 0x7fffffff})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x8f, 0x3, 0x9, 0x8, 0x7, 0x10000], 0x7, 0x800}) (async)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x22) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2) (async)
socketpair(0x9, 0x5, 0x3, &(0x7f0000000700)) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x18}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000840)={0x11c, 0x62b36602, 0x1, 0x8, 0x1, 0x7fffffff}) (async)

18:53:24 executing program 4:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}}, 0x20000004) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x8, 0x3, 0xcd, 0x35f5, 0x4, 0x7f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x8, 0x1, 0xcb, 0x2b}, 'syz1\x00', 0x23}) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async)

18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220041, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1f, 0x10, "407a222e5960614cade8e5f33e8296b7ca6c157b35c56d434cb313b90b5103074bfe0fa0c82c72bdf66856c9d2a488d463db303c9c474cebd6b4e28527f3fbee", "bfa5245b5db6b3b79ac623c8dc5da3709d02b09803f70781f5d390e8ca6efe13", [0xffffffff80000000, 0x80000000]})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x9], 0x2, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x10})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000200))
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080))
syz_open_dev$loop(&(0x7f0000000280), 0x8000000000000000, 0x4000)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220041, 0x0) (async)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1f, 0x10, "407a222e5960614cade8e5f33e8296b7ca6c157b35c56d434cb313b90b5103074bfe0fa0c82c72bdf66856c9d2a488d463db303c9c474cebd6b4e28527f3fbee", "bfa5245b5db6b3b79ac623c8dc5da3709d02b09803f70781f5d390e8ca6efe13", [0xffffffff80000000, 0x80000000]}) (async)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000180)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x9], 0x2, 0x80800}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x10}) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000200)) (async)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080)) (async)
syz_open_dev$loop(&(0x7f0000000280), 0x8000000000000000, 0x4000) (async)

[ 1120.020137] input: syz0 as /devices/virtual/input/input11719
[ 1120.033623] input: syz1 as /devices/virtual/input/input11720
[ 1120.057831] input: syz1 as /devices/virtual/input/input11721
18:53:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:24 executing program 2:
ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe], [0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:24 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x800, 0x8})

[ 1120.075792] input: syz1 as /devices/virtual/input/input11722
[ 1120.091519] input: syz1 as /devices/virtual/input/input11724
18:53:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async)

18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x8f, 0x3, 0x9, 0x8, 0x7, 0x10000], 0x7, 0x800, 0x0, <r3=>0xffffffffffffffff}) (async, rerun: 64)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x22) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2) (async, rerun: 32)
socketpair(0x9, 0x5, 0x3, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x18}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000840)={0x11c, 0x62b36602, 0x1, 0x8, 0x1, 0x7fffffff})

18:53:24 executing program 2:
ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe], [0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1120.177683] input: syz1 as /devices/virtual/input/input11728
[ 1120.181223] input: syz1 as /devices/virtual/input/input11727
[ 1120.213280] input: syz1 as /devices/virtual/input/input11729
[ 1120.217659] input: syz1 as /devices/virtual/input/input11730
18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x8, 0x0, 0x8000, 0x7})
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x16)

18:53:24 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x800, 0x8})

18:53:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1120.234799] input: syz1 as /devices/virtual/input/input11731
[ 1120.323491] input: syz0 as /devices/virtual/input/input11734
[ 1120.339450] input: syz1 as /devices/virtual/input/input11736
[ 1120.342404] input: syz1 as /devices/virtual/input/input11735
[ 1120.349161] input: syz1 as /devices/virtual/input/input11737
18:53:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x8, 0x0, 0x8000, 0x7}) (async)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x16)

18:53:24 executing program 2:
ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000)) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe], [0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1120.373242] input: syz1 as /devices/virtual/input/input11738
18:53:24 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x800, 0x8})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x800, 0x8}) (async)

18:53:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x8, 0x0, 0x8000, 0x7}) (async)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x16)

[ 1120.428828] input: syz1 as /devices/virtual/input/input11739
18:53:25 executing program 2:
ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x400001, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x2, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1120.487343] input: syz0 as /devices/virtual/input/input11741
[ 1120.488217] input: syz1 as /devices/virtual/input/input11740
[ 1120.508160] input: syz1 as /devices/virtual/input/input11742
18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_getres(0x7, &(0x7f0000000000))
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1120.532469] input: syz1 as /devices/virtual/input/input11743
[ 1120.572223] input: syz1 as /devices/virtual/input/input11744
18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1)

18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
clock_getres(0x7, &(0x7f0000000000))
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:25 executing program 2:
ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x400001, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x2, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1120.619140] input: syz1 as /devices/virtual/input/input11745
[ 1120.636206] input: syz0 as /devices/virtual/input/input11746
[ 1120.651239] input: syz1 as /devices/virtual/input/input11749
18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x71)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:25 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x408442, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r0})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040))

18:53:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1)

[ 1120.681719] input: syz1 as /devices/virtual/input/input11750
18:53:25 executing program 2:
ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x400001, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x2, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x8, 0x0, 0x8000, 0x7})
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x16)

[ 1120.757630] input: syz1 as /devices/virtual/input/input11753
[ 1120.784896] input: syz0 as /devices/virtual/input/input11754
[ 1120.787525] input: syz1 as /devices/virtual/input/input11755
18:53:25 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0xfffffb0d], 0x2, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x4, 0x7fffffff, 0x7468})

18:53:25 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x408442, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r0}) (async, rerun: 64)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async, rerun: 32)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (rerun: 32)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040))

18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_getres(0x7, &(0x7f0000000000)) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1)

[ 1120.813807] input: syz1 as /devices/virtual/input/input11758
18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 32)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x71) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1120.869449] input: syz1 as /devices/virtual/input/input11759
18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:25 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x408442, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r0}) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async, rerun: 64)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (rerun: 64)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040))

18:53:25 executing program 5:
ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe], [0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:25 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0xfffffb0d], 0x2, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x4, 0x7fffffff, 0x7468})

[ 1120.910589] input: syz1 as /devices/virtual/input/input11760
[ 1120.919517] input: syz1 as /devices/virtual/input/input11761
[ 1120.936894] input: syz1 as /devices/virtual/input/input11762
18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)

[ 1120.992354] input: syz1 as /devices/virtual/input/input11763
18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x71) (async, rerun: 32)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (rerun: 32)

[ 1121.037750] input: syz1 as /devices/virtual/input/input11764
[ 1121.076414] input: syz1 as /devices/virtual/input/input11765
[ 1121.081312] input: syz1 as /devices/virtual/input/input11766
18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)

18:53:25 executing program 5:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}}, 0x20000004)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x8, 0x3, 0xcd, 0x35f5, 0x4, 0x7f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x8, 0x1, 0xcb, 0x2b}, 'syz1\x00', 0x23})
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)

18:53:25 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x10)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="7118a4387021d3a9cd27e00bbe246a29492d6e515c58538c311c0414e33428700791c429910a23d45f5d2c9daaed4443d84d7884266d3a00c708416462b0753b72efaff699a70c4e390595b0b7d097ab52741716e3bc45841dac73f17b3489f7038ffa4af8e5c7cccd5deaf7227e79d2794618d73f10dd4f4b21bdfaad5cc3009748454ee33788c00cabba11bf6831afc38ff1fb29a93f64577862572a211db88019607dacbc629617b03eff60c10509e5545db2ddc2cb28b3a6b098326039c9373836c29c49233c1e90dd7e5a36d63e09cfc41b501a2afa8f637e87526c6e09010393", 0xe3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1121.107439] input: syz1 as /devices/virtual/input/input11767
[ 1121.126065] input: syz1 as /devices/virtual/input/input11768
[ 1121.130186] input: syz1 as /devices/virtual/input/input11769
18:53:25 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0xfffffb0d], 0x2, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x4, 0x7fffffff, 0x7468})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) (async)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0xfffffb0d], 0x2, 0x80800}) (async)
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x4, 0x7fffffff, 0x7468}) (async)

[ 1121.199595] input: syz1 as /devices/virtual/input/input11770
18:53:25 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x10)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x10) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80)) (async)

18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)

18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="7118a4387021d3a9cd27e00bbe246a29492d6e515c58538c311c0414e33428700791c429910a23d45f5d2c9daaed4443d84d7884266d3a00c708416462b0753b72efaff699a70c4e390595b0b7d097ab52741716e3bc45841dac73f17b3489f7038ffa4af8e5c7cccd5deaf7227e79d2794618d73f10dd4f4b21bdfaad5cc3009748454ee33788c00cabba11bf6831afc38ff1fb29a93f64577862572a211db88019607dacbc629617b03eff60c10509e5545db2ddc2cb28b3a6b098326039c9373836c29c49233c1e90dd7e5a36d63e09cfc41b501a2afa8f637e87526c6e09010393", 0xe3) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd28, 0xffff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80c0)

[ 1121.249193] input: syz1 as /devices/virtual/input/input11772
[ 1121.256224] input: syz1 as /devices/virtual/input/input11773
[ 1121.261333] input: syz1 as /devices/virtual/input/input11771
18:53:25 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x10)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:25 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x10)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:25 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x8, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1121.328745] input: syz1 as /devices/virtual/input/input11774
[ 1121.362593] input: syz1 as /devices/virtual/input/input11775
18:53:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xa, 0x7, {0x57, 0x4, 0x8000, {0x4, 0x5}, {0x0, 0x4}, @rumble={0xfffa, 0x3}}, {0x55, 0x1, 0x1, {0x3, 0x4}, {0x4, 0x81}, @const={0x9be3, {0xedae, 0x1f6, 0x2, 0xaec}}}})
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5)

18:53:25 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0x200})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd28, 0xffff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80c0)

18:53:25 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async, rerun: 64)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2}) (async, rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x8, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1121.390555] input: syz1 as /devices/virtual/input/input11777
[ 1121.398052] input: syz1 as /devices/virtual/input/input11776
[ 1121.403044] input: syz1 as /devices/virtual/input/input11778
18:53:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="7118a4387021d3a9cd27e00bbe246a29492d6e515c58538c311c0414e33428700791c429910a23d45f5d2c9daaed4443d84d7884266d3a00c708416462b0753b72efaff699a70c4e390595b0b7d097ab52741716e3bc45841dac73f17b3489f7038ffa4af8e5c7cccd5deaf7227e79d2794618d73f10dd4f4b21bdfaad5cc3009748454ee33788c00cabba11bf6831afc38ff1fb29a93f64577862572a211db88019607dacbc629617b03eff60c10509e5545db2ddc2cb28b3a6b098326039c9373836c29c49233c1e90dd7e5a36d63e09cfc41b501a2afa8f637e87526c6e09010393", 0xe3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="7118a4387021d3a9cd27e00bbe246a29492d6e515c58538c311c0414e33428700791c429910a23d45f5d2c9daaed4443d84d7884266d3a00c708416462b0753b72efaff699a70c4e390595b0b7d097ab52741716e3bc45841dac73f17b3489f7038ffa4af8e5c7cccd5deaf7227e79d2794618d73f10dd4f4b21bdfaad5cc3009748454ee33788c00cabba11bf6831afc38ff1fb29a93f64577862572a211db88019607dacbc629617b03eff60c10509e5545db2ddc2cb28b3a6b098326039c9373836c29c49233c1e90dd7e5a36d63e09cfc41b501a2afa8f637e87526c6e09010393", 0xe3) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)

18:53:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x300)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

[ 1121.505134] input: syz1 as /devices/virtual/input/input11779
[ 1121.517079] input: syz1 as /devices/virtual/input/input11780
[ 1121.529570] input: syz1 as /devices/virtual/input/input11781
[ 1121.536115] input: syz1 as /devices/virtual/input/input11782
18:53:26 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xa, 0x7, {0x57, 0x4, 0x8000, {0x4, 0x5}, {0x0, 0x4}, @rumble={0xfffa, 0x3}}, {0x55, 0x1, 0x1, {0x3, 0x4}, {0x4, 0x81}, @const={0x9be3, {0xedae, 0x1f6, 0x2, 0xaec}}}})
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xa, 0x7, {0x57, 0x4, 0x8000, {0x4, 0x5}, {0x0, 0x4}, @rumble={0xfffa, 0x3}}, {0x55, 0x1, 0x1, {0x3, 0x4}, {0x4, 0x81}, @const={0x9be3, {0xedae, 0x1f6, 0x2, 0xaec}}}}) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) (async)

18:53:26 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x8, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:26 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x208740)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x4, {0x0, 0x0, 0x0, 0x0, 0x55b, 0x0, 0x6, 0x1, 0xc, "f0933346a52155476ab433e286f5fddefc36fa8cd561e0cc8a21444406bd877668a1882fa7ef9dbe4dc9d028f992c4218e14fa5300eef5b8b925eb3745b7e21f", "2b65d310fd270a95cd1e05a928e7e168d69086c388eb227fff988cb5335a60c16dc44754166e0063a64acfff5ca21cb03f85d3a762b6b12625ff860f319d0745", "b6f17e00a52fb8ce97180f2302129397916682e9610092e0188494340acbe766", [0x3, 0x100]}})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x80000001, 0x15, 0x17, 0x9, "e64ce996b7f522cb1a91c2b5d54da62a448aaeb51ac3177be672f7c26f73848a9fbd634056cb4ec1ed7d593e67631045445b0d3ca000b328f53d31ec59619082", "da62dc684ade5feec03d468718371312ca98d4d63e7f1ebee5520e71b7c6590e", [0x101, 0x7f]})

[ 1121.552411] input: syz1 as /devices/virtual/input/input11783
18:53:26 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd28, 0xffff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80c0)

18:53:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x300)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x300) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040)) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

18:53:26 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x7fff, 0xf89, 0x8001, 0xbbbbbbbb})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x8001}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

18:53:26 executing program 2:
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1121.662223] input: syz1 as /devices/virtual/input/input11785
[ 1121.686051] input: syz1 as /devices/virtual/input/input11786
18:53:26 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xa, 0x7, {0x57, 0x4, 0x8000, {0x4, 0x5}, {0x0, 0x4}, @rumble={0xfffa, 0x3}}, {0x55, 0x1, 0x1, {0x3, 0x4}, {0x4, 0x81}, @const={0x9be3, {0xedae, 0x1f6, 0x2, 0xaec}}}}) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5)

18:53:26 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x300)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:26 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

18:53:26 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x7fff, 0xf89, 0x8001, 0xbbbbbbbb}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x8001}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

[ 1121.713516] input: syz1 as /devices/virtual/input/input11787
[ 1121.716326] input: syz1 as /devices/virtual/input/input11788
18:53:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async, rerun: 64)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x300) (rerun: 64)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040)) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async, rerun: 64)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (rerun: 64)

18:53:26 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x7fff, 0xf89, 0x8001, 0xbbbbbbbb}) (async, rerun: 64)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x8001}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

18:53:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (fail_nth: 1)

18:53:26 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)

18:53:26 executing program 2:
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

[ 1121.811137] input: syz1 as /devices/virtual/input/input11789
[ 1121.818972] input: syz1 as /devices/virtual/input/input11791
[ 1121.821722] input: syz1 as /devices/virtual/input/input11790
[ 1121.839211] input: syz1 as /devices/virtual/input/input11793
18:53:26 executing program 3:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]})
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db)

18:53:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x0, 0x0, 0x638}, 0x18)

18:53:26 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000100)={'syz1\x00', {0x4, 0x9, 0x7, 0xffff}, 0x2d, [0x3, 0x5, 0x2, 0x0, 0x8bb, 0xfd, 0x6b7a373a, 0x9e3f, 0x0, 0x401, 0x4, 0xff, 0x2, 0x3373b5c7, 0x1000, 0x0, 0x7, 0x2, 0x5, 0x358, 0x5, 0x8, 0x10001, 0x1000, 0xffff, 0x1, 0x2, 0x1, 0x2, 0x80000001, 0x7, 0x4, 0x476, 0x7, 0x403, 0x1ff, 0xfffffd02, 0x101, 0xffffff36, 0x7ff, 0x8000, 0x8, 0x1, 0xfff, 0x7, 0x2, 0x0, 0xc00, 0x1, 0x6, 0x8, 0x8, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2, 0x7, 0xffffffff, 0x4, 0x4, 0x3, 0x8], [0xfffffffb, 0x9, 0x7fffffff, 0x3, 0x80000000, 0x82, 0x8001, 0xd3fb, 0x8, 0x100, 0x5, 0x1, 0x7fffffff, 0x2, 0x1f, 0x8000, 0x6, 0x7bf0, 0xffff, 0x10000, 0x3, 0x2, 0x80000000, 0x0, 0x4, 0xfffffffd, 0x4, 0x5, 0x7ff, 0x3f, 0x10001, 0x3, 0x100, 0xa8, 0x8, 0x7, 0x0, 0x8, 0xe2a6, 0x40, 0x651e07ae, 0x7, 0x9125, 0xcddb, 0x80000001, 0x101, 0xffffffff, 0x3, 0xbd3, 0xfffff801, 0x2, 0x40000000, 0x99cd, 0x1, 0x4, 0x7, 0x4, 0x5, 0x8, 0x1, 0x2600, 0x2, 0x2, 0x3f], [0x1, 0x7f, 0x9ec5, 0x9, 0xf52c, 0x3cf4, 0x401, 0xe29b, 0x8, 0x4, 0xfffffff7, 0xfffffff9, 0x0, 0x1, 0x50bc7dce, 0xfffffffa, 0x5, 0x40, 0x2, 0x6, 0x81, 0x3f, 0x1, 0x9, 0xffffff06, 0x9, 0x7bfeeec8, 0x71718689, 0x8, 0x8, 0x80, 0x1, 0x1, 0xfff, 0xffffff01, 0x800, 0x9, 0x4, 0x7ff, 0x80ba, 0xffffffff, 0x400, 0x7, 0x3ff, 0x3f, 0x1ff, 0x1000, 0x4, 0x7, 0xf1b, 0x6, 0xfffffffa, 0xff, 0xca36, 0x401, 0x88, 0x8, 0x8, 0x7, 0xffffff81, 0x9, 0x3, 0x1, 0x8], [0x7fff, 0x800, 0x4, 0xf8, 0x55d1096c, 0x401, 0x3, 0x5cfb, 0x6, 0x4, 0x1000, 0x2, 0xda, 0x10001, 0x8000, 0x7f, 0x9, 0x4, 0xffffffff, 0x200, 0xebb, 0x8, 0x7ff, 0x9, 0x6, 0xfffffffb, 0x5, 0xd0000000, 0x4, 0x6a, 0x401, 0x5, 0x6, 0x10000, 0xe90c, 0x6, 0x2c55, 0x4, 0x80000000, 0x7, 0x26, 0x7fffffff, 0x80000001, 0x5, 0x6, 0x1000, 0x3ff, 0x6, 0x8, 0x6, 0x8000, 0x800, 0x6, 0xfffff000, 0xffff0001, 0x0, 0x9, 0x0, 0x8001, 0x6, 0x3f, 0x1, 0x1, 0x5]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1121.938146] input: syz1 as /devices/virtual/input/input11794
[ 1121.948119] input: syz1 as /devices/virtual/input/input11796
[ 1121.957092] input: syz1 as /devices/virtual/input/input11797
18:53:26 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) (async)

18:53:26 executing program 2:
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:26 executing program 1:
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/35)
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

18:53:26 executing program 3:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb) (async)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) (async)
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]}) (async)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db)

[ 1122.007975] input: syz1 as /devices/virtual/input/input11798
18:53:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x0, 0x0, 0x638}, 0x18)

18:53:26 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000100)={'syz1\x00', {0x4, 0x9, 0x7, 0xffff}, 0x2d, [0x3, 0x5, 0x2, 0x0, 0x8bb, 0xfd, 0x6b7a373a, 0x9e3f, 0x0, 0x401, 0x4, 0xff, 0x2, 0x3373b5c7, 0x1000, 0x0, 0x7, 0x2, 0x5, 0x358, 0x5, 0x8, 0x10001, 0x1000, 0xffff, 0x1, 0x2, 0x1, 0x2, 0x80000001, 0x7, 0x4, 0x476, 0x7, 0x403, 0x1ff, 0xfffffd02, 0x101, 0xffffff36, 0x7ff, 0x8000, 0x8, 0x1, 0xfff, 0x7, 0x2, 0x0, 0xc00, 0x1, 0x6, 0x8, 0x8, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2, 0x7, 0xffffffff, 0x4, 0x4, 0x3, 0x8], [0xfffffffb, 0x9, 0x7fffffff, 0x3, 0x80000000, 0x82, 0x8001, 0xd3fb, 0x8, 0x100, 0x5, 0x1, 0x7fffffff, 0x2, 0x1f, 0x8000, 0x6, 0x7bf0, 0xffff, 0x10000, 0x3, 0x2, 0x80000000, 0x0, 0x4, 0xfffffffd, 0x4, 0x5, 0x7ff, 0x3f, 0x10001, 0x3, 0x100, 0xa8, 0x8, 0x7, 0x0, 0x8, 0xe2a6, 0x40, 0x651e07ae, 0x7, 0x9125, 0xcddb, 0x80000001, 0x101, 0xffffffff, 0x3, 0xbd3, 0xfffff801, 0x2, 0x40000000, 0x99cd, 0x1, 0x4, 0x7, 0x4, 0x5, 0x8, 0x1, 0x2600, 0x2, 0x2, 0x3f], [0x1, 0x7f, 0x9ec5, 0x9, 0xf52c, 0x3cf4, 0x401, 0xe29b, 0x8, 0x4, 0xfffffff7, 0xfffffff9, 0x0, 0x1, 0x50bc7dce, 0xfffffffa, 0x5, 0x40, 0x2, 0x6, 0x81, 0x3f, 0x1, 0x9, 0xffffff06, 0x9, 0x7bfeeec8, 0x71718689, 0x8, 0x8, 0x80, 0x1, 0x1, 0xfff, 0xffffff01, 0x800, 0x9, 0x4, 0x7ff, 0x80ba, 0xffffffff, 0x400, 0x7, 0x3ff, 0x3f, 0x1ff, 0x1000, 0x4, 0x7, 0xf1b, 0x6, 0xfffffffa, 0xff, 0xca36, 0x401, 0x88, 0x8, 0x8, 0x7, 0xffffff81, 0x9, 0x3, 0x1, 0x8], [0x7fff, 0x800, 0x4, 0xf8, 0x55d1096c, 0x401, 0x3, 0x5cfb, 0x6, 0x4, 0x1000, 0x2, 0xda, 0x10001, 0x8000, 0x7f, 0x9, 0x4, 0xffffffff, 0x200, 0xebb, 0x8, 0x7ff, 0x9, 0x6, 0xfffffffb, 0x5, 0xd0000000, 0x4, 0x6a, 0x401, 0x5, 0x6, 0x10000, 0xe90c, 0x6, 0x2c55, 0x4, 0x80000000, 0x7, 0x26, 0x7fffffff, 0x80000001, 0x5, 0x6, 0x1000, 0x3ff, 0x6, 0x8, 0x6, 0x8000, 0x800, 0x6, 0xfffff000, 0xffff0001, 0x0, 0x9, 0x0, 0x8001, 0x6, 0x3f, 0x1, 0x1, 0x5]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1122.055241] input: syz1 as /devices/virtual/input/input11800
[ 1122.090907] input: syz1 as /devices/virtual/input/input11801
18:53:26 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]})
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db)

18:53:26 executing program 1:
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/35)
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/35) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) (async)

[ 1122.130112] input: syz1 as /devices/virtual/input/input11803
[ 1122.141532] input: syz1 as /devices/virtual/input/input11804
18:53:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x0, 0x0, 0x638}, 0x18)

18:53:26 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x100800, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x61, 0x0, 0x2})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:26 executing program 3:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae}) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001}) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb) (async)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3) (async)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]}) (async)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c) (async)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db)

18:53:26 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000100)={'syz1\x00', {0x4, 0x9, 0x7, 0xffff}, 0x2d, [0x3, 0x5, 0x2, 0x0, 0x8bb, 0xfd, 0x6b7a373a, 0x9e3f, 0x0, 0x401, 0x4, 0xff, 0x2, 0x3373b5c7, 0x1000, 0x0, 0x7, 0x2, 0x5, 0x358, 0x5, 0x8, 0x10001, 0x1000, 0xffff, 0x1, 0x2, 0x1, 0x2, 0x80000001, 0x7, 0x4, 0x476, 0x7, 0x403, 0x1ff, 0xfffffd02, 0x101, 0xffffff36, 0x7ff, 0x8000, 0x8, 0x1, 0xfff, 0x7, 0x2, 0x0, 0xc00, 0x1, 0x6, 0x8, 0x8, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2, 0x7, 0xffffffff, 0x4, 0x4, 0x3, 0x8], [0xfffffffb, 0x9, 0x7fffffff, 0x3, 0x80000000, 0x82, 0x8001, 0xd3fb, 0x8, 0x100, 0x5, 0x1, 0x7fffffff, 0x2, 0x1f, 0x8000, 0x6, 0x7bf0, 0xffff, 0x10000, 0x3, 0x2, 0x80000000, 0x0, 0x4, 0xfffffffd, 0x4, 0x5, 0x7ff, 0x3f, 0x10001, 0x3, 0x100, 0xa8, 0x8, 0x7, 0x0, 0x8, 0xe2a6, 0x40, 0x651e07ae, 0x7, 0x9125, 0xcddb, 0x80000001, 0x101, 0xffffffff, 0x3, 0xbd3, 0xfffff801, 0x2, 0x40000000, 0x99cd, 0x1, 0x4, 0x7, 0x4, 0x5, 0x8, 0x1, 0x2600, 0x2, 0x2, 0x3f], [0x1, 0x7f, 0x9ec5, 0x9, 0xf52c, 0x3cf4, 0x401, 0xe29b, 0x8, 0x4, 0xfffffff7, 0xfffffff9, 0x0, 0x1, 0x50bc7dce, 0xfffffffa, 0x5, 0x40, 0x2, 0x6, 0x81, 0x3f, 0x1, 0x9, 0xffffff06, 0x9, 0x7bfeeec8, 0x71718689, 0x8, 0x8, 0x80, 0x1, 0x1, 0xfff, 0xffffff01, 0x800, 0x9, 0x4, 0x7ff, 0x80ba, 0xffffffff, 0x400, 0x7, 0x3ff, 0x3f, 0x1ff, 0x1000, 0x4, 0x7, 0xf1b, 0x6, 0xfffffffa, 0xff, 0xca36, 0x401, 0x88, 0x8, 0x8, 0x7, 0xffffff81, 0x9, 0x3, 0x1, 0x8], [0x7fff, 0x800, 0x4, 0xf8, 0x55d1096c, 0x401, 0x3, 0x5cfb, 0x6, 0x4, 0x1000, 0x2, 0xda, 0x10001, 0x8000, 0x7f, 0x9, 0x4, 0xffffffff, 0x200, 0xebb, 0x8, 0x7ff, 0x9, 0x6, 0xfffffffb, 0x5, 0xd0000000, 0x4, 0x6a, 0x401, 0x5, 0x6, 0x10000, 0xe90c, 0x6, 0x2c55, 0x4, 0x80000000, 0x7, 0x26, 0x7fffffff, 0x80000001, 0x5, 0x6, 0x1000, 0x3ff, 0x6, 0x8, 0x6, 0x8000, 0x800, 0x6, 0xfffff000, 0xffff0001, 0x0, 0x9, 0x0, 0x8001, 0x6, 0x3f, 0x1, 0x1, 0x5]}, 0x45c) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

[ 1122.172373] input: syz1 as /devices/virtual/input/input11805
[ 1122.200004] input: syz1 as /devices/virtual/input/input11807
18:53:26 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]})
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db)

18:53:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:26 executing program 1:
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/35) (async)
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

18:53:26 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:26 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x100800, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x61, 0x0, 0x2}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1122.262879] input: syz1 as /devices/virtual/input/input11809
18:53:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async, rerun: 32)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:26 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x100800, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x61, 0x0, 0x2}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x4], 0x2, 0x400, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fffffff, 0x2, 0x3f, 0x1], 0x4, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x2, {0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x1, 0x1f, 0x8, "1151df922f805d33d6551814d8200c7c501137773c57296cdc480f6e7950349759a0b5d533f2442593363e10df672ce63244dd237c88a660df799bbddc40cd7e", "762bb2f60fccbd93cc52631de08611c0dd24c804c85ec4987707ee954c8de6bbff59061a9704167efac9ab8a273d304a686c1fc1f0cf1a735e3ec39afc395d96", "483ddc98a003bf45ffcd144367fc11cf7599110277d9324c99bd2c0d3f1166a7", [0x80000001, 0x200]}})

18:53:26 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]})
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db)

18:53:26 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) (async)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

[ 1122.356721] input: syz1 as /devices/virtual/input/input11811
[ 1122.365661] input: syz1 as /devices/virtual/input/input11814
[ 1122.367875] input: syz1 as /devices/virtual/input/input11812
[ 1122.372160] input: syz1 as /devices/virtual/input/input11813
18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]})
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e712f9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x522]}, 0x45c)

18:53:27 executing program 0:
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0], 0xa})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x15)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1122.471442] input: syz1 as /devices/virtual/input/input11816
[ 1122.479032] input: syz1 as /devices/virtual/input/input11817
[ 1122.495327] input: syz1 as /devices/virtual/input/input11819
18:53:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x4], 0x2, 0x400, 0x0, <r1=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fffffff, 0x2, 0x3f, 0x1], 0x4, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x2, {0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x1, 0x1f, 0x8, "1151df922f805d33d6551814d8200c7c501137773c57296cdc480f6e7950349759a0b5d533f2442593363e10df672ce63244dd237c88a660df799bbddc40cd7e", "762bb2f60fccbd93cc52631de08611c0dd24c804c85ec4987707ee954c8de6bbff59061a9704167efac9ab8a273d304a686c1fc1f0cf1a735e3ec39afc395d96", "483ddc98a003bf45ffcd144367fc11cf7599110277d9324c99bd2c0d3f1166a7", [0x80000001, 0x200]}})

18:53:27 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x15)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x4], 0x2, 0x400, 0x0, <r1=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fffffff, 0x2, 0x3f, 0x1], 0x4, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x2, {0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x1, 0x1f, 0x8, "1151df922f805d33d6551814d8200c7c501137773c57296cdc480f6e7950349759a0b5d533f2442593363e10df672ce63244dd237c88a660df799bbddc40cd7e", "762bb2f60fccbd93cc52631de08611c0dd24c804c85ec4987707ee954c8de6bbff59061a9704167efac9ab8a273d304a686c1fc1f0cf1a735e3ec39afc395d96", "483ddc98a003bf45ffcd144367fc11cf7599110277d9324c99bd2c0d3f1166a7", [0x80000001, 0x200]}})

18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={0x25bf, 0x2, &(0x7f0000000180)=[0xfffa, 0x5], &(0x7f00000001c0)=[0x1, 0xff, 0x1], &(0x7f0000000200)=[0x7]})

18:53:27 executing program 0:
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0], 0xa})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)

[ 1122.609704] input: syz1 as /devices/virtual/input/input11820
[ 1122.610792] input: syz1 as /devices/virtual/input/input11821
[ 1122.630532] input: syz1 as /devices/virtual/input/input11823
[ 1122.635564] input: syz1 as /devices/virtual/input/input11822
18:53:27 executing program 3:
r0 = semget$private(0x0, 0x2, 0x2)
semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000003100)=""/4096)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/64)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x15) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1122.823628] input: syz1 as /devices/virtual/input/input11824
18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x101000)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}, 0x0, 0x0, 0x4}, 0x18)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)

18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3)

18:53:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:27 executing program 3:
r0 = semget$private(0x0, 0x2, 0x2)
semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000003100)=""/4096) (async)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/64)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:27 executing program 0:
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0], 0xa})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async)

[ 1122.865247] input: syz1 as /devices/virtual/input/input11825
[ 1122.873047] input: syz1 as /devices/virtual/input/input11826
[ 1122.884309] input: syz1 as /devices/virtual/input/input11827
[ 1122.893405] input: syz1 as /devices/virtual/input/input11828
18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x101000) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}, 0x0, 0x0, 0x4}, 0x18) (async)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)

18:53:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1122.998154] input: syz1 as /devices/virtual/input/input11829
[ 1123.005789] input: syz1 as /devices/virtual/input/input11830
[ 1123.018042] input: syz1 as /devices/virtual/input/input11833
[ 1123.035205] input: syz1 as /devices/virtual/input/input11832
18:53:27 executing program 3:
r0 = semget$private(0x0, 0x2, 0x2)
semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000003100)=""/4096)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/64)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
semget$private(0x0, 0x2, 0x2) (async)
semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000003100)=""/4096) (async)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/64) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) (async)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
write$input_event(0xffffffffffffffff, &(0x7f0000000140)={{r1, r2/1000+10000}, 0x1f, 0x3, 0x8f}, 0x18)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x11, 0x200, 0x768}, 0x18)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040))

18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)

18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x101000) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}, 0x0, 0x0, 0x4}, 0x18) (async, rerun: 64)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (rerun: 64)

[ 1123.131325] input: syz1 as /devices/virtual/input/input11835
[ 1123.152403] input: syz1 as /devices/virtual/input/input11837
[ 1123.155542] input: syz1 as /devices/virtual/input/input11838
18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 64)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
write$input_event(0xffffffffffffffff, &(0x7f0000000140)={{r1, r2/1000+10000}, 0x1f, 0x3, 0x8f}, 0x18) (async, rerun: 64)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (rerun: 64)
write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x11, 0x200, 0x768}, 0x18) (async, rerun: 32)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (rerun: 32)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040))

18:53:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

[ 1123.177293] input: syz1 as /devices/virtual/input/input11836
18:53:27 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ba], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:27 executing program 1:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1415c0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff)

18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x7, 0x6, 0x7})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={0xffffffffffffffff, 0x8000, {0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x12, 0x15, 0x18, "6ff559ebe90d9cb3ed24f484c051a5619d12b1a1c9890f12e658034c6cc4457bf46e45314007a597612a9cfc2714de0720d816188bcdd80238fb97e9fa5a5e2a", "d190297a25bc44ff128b5e8dd1cafd1ba3a695a60718528cb94e4ad9fafedb0b4f7da66a99789cbdf1a9917c7415ea38993a862f79aeaed92c890e7b26ee3026", "bfb3806ce7ff3f735838e8a291fb3cf0ec00", [0x0, 0xffffffff]}})

18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1123.269028] input: syz1 as /devices/virtual/input/input11840
[ 1123.292675] input: syz1 as /devices/virtual/input/input11841
18:53:27 executing program 1:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x1) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) (async, rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1415c0, 0x0) (rerun: 32)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff)

18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x7, 0x6, 0x7})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={0xffffffffffffffff, 0x8000, {0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x12, 0x15, 0x18, "6ff559ebe90d9cb3ed24f484c051a5619d12b1a1c9890f12e658034c6cc4457bf46e45314007a597612a9cfc2714de0720d816188bcdd80238fb97e9fa5a5e2a", "d190297a25bc44ff128b5e8dd1cafd1ba3a695a60718528cb94e4ad9fafedb0b4f7da66a99789cbdf1a9917c7415ea38993a862f79aeaed92c890e7b26ee3026", "bfb3806ce7ff3f735838e8a291fb3cf0ec00", [0x0, 0xffffffff]}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x7, 0x6, 0x7}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={0xffffffffffffffff, 0x8000, {0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x12, 0x15, 0x18, "6ff559ebe90d9cb3ed24f484c051a5619d12b1a1c9890f12e658034c6cc4457bf46e45314007a597612a9cfc2714de0720d816188bcdd80238fb97e9fa5a5e2a", "d190297a25bc44ff128b5e8dd1cafd1ba3a695a60718528cb94e4ad9fafedb0b4f7da66a99789cbdf1a9917c7415ea38993a862f79aeaed92c890e7b26ee3026", "bfb3806ce7ff3f735838e8a291fb3cf0ec00", [0x0, 0xffffffff]}}) (async)

18:53:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
write$input_event(0xffffffffffffffff, &(0x7f0000000140)={{r1, r2/1000+10000}, 0x1f, 0x3, 0x8f}, 0x18)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x11, 0x200, 0x768}, 0x18)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040))
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
clock_gettime(0x0, &(0x7f0000000100)) (async)
write$input_event(0xffffffffffffffff, &(0x7f0000000140)={{r1, r2/1000+10000}, 0x1f, 0x3, 0x8f}, 0x18) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x11, 0x200, 0x768}, 0x18) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) (async)

18:53:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x4, 0x7, {0x52, 0x52, 0x1f, {0x6, 0x800}, {0x9, 0x9}, @period={0x5c, 0x8, 0x7ff, 0x81, 0x9, {0x2b6, 0x4, 0x5, 0x949c}, 0x3, &(0x7f0000000040)=[0x0, 0xff2, 0x7]}}, {0x5, 0x8000, 0x5, {0xd84, 0x3}, {0x4, 0x925}, @rumble={0x7, 0x81}}})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1123.348142] input: syz1 as /devices/virtual/input/input11842
[ 1123.351112] input: syz1 as /devices/virtual/input/input11844
18:53:27 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ba], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ba], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x7, 0x6, 0x7}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={0xffffffffffffffff, 0x8000, {0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x12, 0x15, 0x18, "6ff559ebe90d9cb3ed24f484c051a5619d12b1a1c9890f12e658034c6cc4457bf46e45314007a597612a9cfc2714de0720d816188bcdd80238fb97e9fa5a5e2a", "d190297a25bc44ff128b5e8dd1cafd1ba3a695a60718528cb94e4ad9fafedb0b4f7da66a99789cbdf1a9917c7415ea38993a862f79aeaed92c890e7b26ee3026", "bfb3806ce7ff3f735838e8a291fb3cf0ec00", [0x0, 0xffffffff]}})

[ 1123.412710] input: syz1 as /devices/virtual/input/input11845
18:53:27 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1123.455161] input: syz1 as /devices/virtual/input/input11847
[ 1123.472561] input: syz1 as /devices/virtual/input/input11848
18:53:28 executing program 1:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1415c0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1415c0, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) (async)

18:53:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x5, 0x1, {0x54, 0x7f, 0x9, {0x2, 0xb88}, {0x8000}, @rumble={0x3, 0x3}}, {0x55, 0x7, 0x6, {0x3ff, 0x8}, {0x7fff, 0x8}, @rumble={0x4, 0x20}}})

18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x4, 0x7, {0x52, 0x52, 0x1f, {0x6, 0x800}, {0x9, 0x9}, @period={0x5c, 0x8, 0x7ff, 0x81, 0x9, {0x2b6, 0x4, 0x5, 0x949c}, 0x3, &(0x7f0000000040)=[0x0, 0xff2, 0x7]}}, {0x5, 0x8000, 0x5, {0xd84, 0x3}, {0x4, 0x925}, @rumble={0x7, 0x81}}}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:28 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0xa, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x8d1, [{0x10, 0x1, 0x3}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xd}, {0xb}, {0xa, 0x1}, {0x10, 0x2}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x6, 0x3}]}, @datasec={0x10, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x5, 0x2a}, {0x1, 0x5, 0x6}], "59eb"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0xf, 0x2}, {0x3}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x4b7e}}, @fwd={0x2}]}, {0x0, [0x2e, 0x30, 0x0, 0x4f, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000200)=""/57, 0x112, 0x39, 0x1}, 0x20)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x716c, 0x1, 0x0, 0x2}, 'syz0\x00', 0x4a})
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000002c0))

[ 1123.507462] input: syz1 as /devices/virtual/input/input11849
18:53:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ba], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ba], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:28 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x9, 0x988, 0x5b], 0x4, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000))

18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x4, 0x7, {0x52, 0x52, 0x1f, {0x6, 0x800}, {0x9, 0x9}, @period={0x5c, 0x8, 0x7ff, 0x81, 0x9, {0x2b6, 0x4, 0x5, 0x949c}, 0x3, &(0x7f0000000040)=[0x0, 0xff2, 0x7]}}, {0x5, 0x8000, 0x5, {0xd84, 0x3}, {0x4, 0x925}, @rumble={0x7, 0x81}}})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x4, 0x7, {0x52, 0x52, 0x1f, {0x6, 0x800}, {0x9, 0x9}, @period={0x5c, 0x8, 0x7ff, 0x81, 0x9, {0x2b6, 0x4, 0x5, 0x949c}, 0x3, &(0x7f0000000040)=[0x0, 0xff2, 0x7]}}, {0x5, 0x8000, 0x5, {0xd84, 0x3}, {0x4, 0x925}, @rumble={0x7, 0x81}}}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

[ 1123.571838] input: syz1 as /devices/virtual/input/input11851
[ 1123.605130] input: syz1 as /devices/virtual/input/input11852
18:53:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x5, 0x1, {0x54, 0x7f, 0x9, {0x2, 0xb88}, {0x8000}, @rumble={0x3, 0x3}}, {0x55, 0x7, 0x6, {0x3ff, 0x8}, {0x7fff, 0x8}, @rumble={0x4, 0x20}}})

18:53:28 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0xa, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x8d1, [{0x10, 0x1, 0x3}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xd}, {0xb}, {0xa, 0x1}, {0x10, 0x2}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x6, 0x3}]}, @datasec={0x10, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x5, 0x2a}, {0x1, 0x5, 0x6}], "59eb"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0xf, 0x2}, {0x3}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x4b7e}}, @fwd={0x2}]}, {0x0, [0x2e, 0x30, 0x0, 0x4f, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000200)=""/57, 0x112, 0x39, 0x1}, 0x20) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async, rerun: 32)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async, rerun: 32)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x716c, 0x1, 0x0, 0x2}, 'syz0\x00', 0x4a}) (async)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000002c0))

18:53:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1123.660986] input: syz1 as /devices/virtual/input/input11854
18:53:28 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0xa, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x8d1, [{0x10, 0x1, 0x3}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xd}, {0xb}, {0xa, 0x1}, {0x10, 0x2}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x6, 0x3}]}, @datasec={0x10, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x5, 0x2a}, {0x1, 0x5, 0x6}], "59eb"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0xf, 0x2}, {0x3}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x4b7e}}, @fwd={0x2}]}, {0x0, [0x2e, 0x30, 0x0, 0x4f, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000200)=""/57, 0x112, 0x39, 0x1}, 0x20)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x716c, 0x1, 0x0, 0x2}, 'syz0\x00', 0x4a})
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000002c0))

18:53:28 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x9, 0x988, 0x5b], 0x4, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000))

18:53:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async, rerun: 64)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x5, 0x1, {0x54, 0x7f, 0x9, {0x2, 0xb88}, {0x8000}, @rumble={0x3, 0x3}}, {0x55, 0x7, 0x6, {0x3ff, 0x8}, {0x7fff, 0x8}, @rumble={0x4, 0x20}}})

18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000100)={{0x77359400}, 0x1}, 0x18)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x81, 0x82e, 0x0, @mcast1, @empty, 0x8000, 0x40, 0x6d, 0x101}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x22, 0x0, 0x7ff], 0x4, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xf, 0x2})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {0x2}, 0x0, [], [0x98dc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1123.712197] input: syz1 as /devices/virtual/input/input11855
[ 1123.718464] input: syz1 as /devices/virtual/input/input11857
18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:28 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

18:53:28 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
write$input_event(r2, &(0x7f0000000000)={{}, 0x2, 0xffff, 0x4}, 0x18)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0xfffffffffffffffe)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x6)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@any, 0xfffffffd})

18:53:28 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x9, 0x988, 0x5b], 0x4, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000))
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x9, 0x988, 0x5b], 0x4}) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) (async)

[ 1123.801546] input: syz1 as /devices/virtual/input/input11859
[ 1123.822855] input: syz1 as /devices/virtual/input/input11860
[ 1123.836585] input: syz1 as /devices/virtual/input/input11861
18:53:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000100)={{0x77359400}, 0x1}, 0x18)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x81, 0x82e, 0x0, @mcast1, @empty, 0x8000, 0x40, 0x6d, 0x101}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x22, 0x0, 0x7ff], 0x4, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xf, 0x2}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {0x2}, 0x0, [], [0x98dc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:28 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)

18:53:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x1)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0)
write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x14, 0x9, 0x5}, 0x18)

18:53:28 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
write$input_event(r2, &(0x7f0000000000)={{}, 0x2, 0xffff, 0x4}, 0x18)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0xfffffffffffffffe)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x6)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@any, 0xfffffffd})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) (async)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
write$input_event(r2, &(0x7f0000000000)={{}, 0x2, 0xffff, 0x4}, 0x18) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0xfffffffffffffffe) (async)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x6) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@any, 0xfffffffd}) (async)

18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1123.954051] input: syz1 as /devices/virtual/input/input11864
[ 1123.972410] input: syz1 as /devices/virtual/input/input11865
[ 1123.979344] input: syz1 as /devices/virtual/input/input11866
18:53:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:28 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 64)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (rerun: 64)

18:53:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x1) (async, rerun: 64)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0) (rerun: 64)
write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x14, 0x9, 0x5}, 0x18)

[ 1124.065028] input: syz1 as /devices/virtual/input/input11868
[ 1124.084419] input: syz1 as /devices/virtual/input/input11870
18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$input_event(r0, &(0x7f0000000100)={{0x77359400}, 0x1}, 0x18)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x81, 0x82e, 0x0, @mcast1, @empty, 0x8000, 0x40, 0x6d, 0x101}}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x22, 0x0, 0x7ff], 0x4, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xf, 0x2}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {0x2}, 0x0, [], [0x98dc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:28 executing program 5:
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x1, 0x8000, 0x0, 0x9c9c9c9c})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x1, 0x0, 0x9aa, 0x6}, 0x1b, [0x29c, 0x3, 0x4, 0x8e, 0x0, 0x8, 0x6, 0x5, 0x4, 0x6, 0x9, 0xc6, 0x1f, 0x4, 0xffff, 0x0, 0x528, 0x9, 0x1, 0x5, 0x800, 0x6, 0x3f, 0x800, 0xe71, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x7, 0x9, 0x8000, 0xab3, 0x5, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x3a1ae429, 0x71, 0x0, 0x0, 0x1, 0x10000, 0x200, 0x7, 0xfffff001, 0x1, 0x9, 0x9, 0xcf1, 0x1, 0x2, 0x7fff, 0xffff8000, 0xffff8001, 0x5, 0x1, 0x7, 0x2f74d37a, 0x8, 0x6], [0x2, 0x80000000, 0x3, 0x3, 0x3ae, 0x8, 0x0, 0x0, 0x7ff, 0x7, 0x101, 0x8001, 0x8, 0x8, 0xb8, 0x5, 0x1, 0x10000, 0x2, 0x6, 0x7, 0x5, 0xfffffffa, 0x4d4, 0x9, 0x0, 0x9, 0x7f4, 0x3, 0x1, 0x8, 0x7, 0x7, 0x272a85a4, 0x3, 0x9, 0x2, 0x5, 0x0, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0xffff, 0x7fff, 0x8, 0x9b7, 0xe4, 0x20, 0x8, 0x4, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x7, 0x9, 0x9, 0x80000000, 0x1, 0x1000, 0x4], [0xffff0905, 0xfff, 0xf65, 0x9, 0x7, 0xfffffffa, 0x9f, 0x200, 0x2, 0x1, 0x43, 0x4, 0x40, 0x5, 0x7fff, 0x6, 0x6e1, 0x4, 0x6, 0x1f, 0x7ff, 0x3, 0xcbd, 0x7fffffff, 0x1, 0x4, 0x4, 0x7, 0x20, 0x80000000, 0x50de, 0xd0b, 0xb961, 0x80, 0x0, 0xd0f0, 0x5, 0x7ff, 0x8000, 0x163, 0x80000001, 0xffff7129, 0x1ff, 0xfffffffe, 0x16, 0x10001, 0xcd7, 0x55, 0x1, 0x4, 0x87, 0x4136, 0x5, 0x1, 0x0, 0x3, 0x6, 0x63, 0x1000, 0x600, 0x0, 0xbe, 0x3f, 0xc92f], [0x0, 0x4, 0x401, 0x7fffffff, 0xfff, 0x1, 0x5, 0xfffffffc, 0x81, 0xfffffff8, 0x97, 0x9, 0x8, 0x6, 0x0, 0x40, 0x3a4, 0x4f, 0x3, 0x80000000, 0x1, 0x6, 0x101, 0x0, 0x2, 0x55, 0x80000001, 0x4, 0x0, 0x6b0, 0x1, 0x9c, 0x6, 0x40, 0x1f, 0x5, 0x8000, 0x4, 0x800, 0xff, 0xfff, 0x841, 0x4, 0x2, 0x7, 0x3, 0xffffff1a, 0x4, 0x1f, 0x9, 0x1, 0x0, 0xfffffffb, 0x2, 0x7, 0x4, 0x8001, 0x0, 0x3, 0x3, 0x1, 0x4, 0x7]}, 0x45c)

[ 1124.117400] input: syz1 as /devices/virtual/input/input11871
[ 1124.143331] input: syz1 as /devices/virtual/input/input11872
18:53:28 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
write$input_event(r2, &(0x7f0000000000)={{}, 0x2, 0xffff, 0x4}, 0x18) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0xfffffffffffffffe) (async)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x6)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@any, 0xfffffffd})

18:53:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x7, 0x4, 0x2, 0x5f28}, 'syz0\x00', 0x49})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000))

[ 1124.209084] input: syz1 as /devices/virtual/input/input11938
[ 1124.232997] input: syz1 as /devices/virtual/input/input11939
18:53:28 executing program 5:
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x1, 0x8000, 0x0, 0x9c9c9c9c}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x1, 0x0, 0x9aa, 0x6}, 0x1b, [0x29c, 0x3, 0x4, 0x8e, 0x0, 0x8, 0x6, 0x5, 0x4, 0x6, 0x9, 0xc6, 0x1f, 0x4, 0xffff, 0x0, 0x528, 0x9, 0x1, 0x5, 0x800, 0x6, 0x3f, 0x800, 0xe71, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x7, 0x9, 0x8000, 0xab3, 0x5, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x3a1ae429, 0x71, 0x0, 0x0, 0x1, 0x10000, 0x200, 0x7, 0xfffff001, 0x1, 0x9, 0x9, 0xcf1, 0x1, 0x2, 0x7fff, 0xffff8000, 0xffff8001, 0x5, 0x1, 0x7, 0x2f74d37a, 0x8, 0x6], [0x2, 0x80000000, 0x3, 0x3, 0x3ae, 0x8, 0x0, 0x0, 0x7ff, 0x7, 0x101, 0x8001, 0x8, 0x8, 0xb8, 0x5, 0x1, 0x10000, 0x2, 0x6, 0x7, 0x5, 0xfffffffa, 0x4d4, 0x9, 0x0, 0x9, 0x7f4, 0x3, 0x1, 0x8, 0x7, 0x7, 0x272a85a4, 0x3, 0x9, 0x2, 0x5, 0x0, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0xffff, 0x7fff, 0x8, 0x9b7, 0xe4, 0x20, 0x8, 0x4, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x7, 0x9, 0x9, 0x80000000, 0x1, 0x1000, 0x4], [0xffff0905, 0xfff, 0xf65, 0x9, 0x7, 0xfffffffa, 0x9f, 0x200, 0x2, 0x1, 0x43, 0x4, 0x40, 0x5, 0x7fff, 0x6, 0x6e1, 0x4, 0x6, 0x1f, 0x7ff, 0x3, 0xcbd, 0x7fffffff, 0x1, 0x4, 0x4, 0x7, 0x20, 0x80000000, 0x50de, 0xd0b, 0xb961, 0x80, 0x0, 0xd0f0, 0x5, 0x7ff, 0x8000, 0x163, 0x80000001, 0xffff7129, 0x1ff, 0xfffffffe, 0x16, 0x10001, 0xcd7, 0x55, 0x1, 0x4, 0x87, 0x4136, 0x5, 0x1, 0x0, 0x3, 0x6, 0x63, 0x1000, 0x600, 0x0, 0xbe, 0x3f, 0xc92f], [0x0, 0x4, 0x401, 0x7fffffff, 0xfff, 0x1, 0x5, 0xfffffffc, 0x81, 0xfffffff8, 0x97, 0x9, 0x8, 0x6, 0x0, 0x40, 0x3a4, 0x4f, 0x3, 0x80000000, 0x1, 0x6, 0x101, 0x0, 0x2, 0x55, 0x80000001, 0x4, 0x0, 0x6b0, 0x1, 0x9c, 0x6, 0x40, 0x1f, 0x5, 0x8000, 0x4, 0x800, 0xff, 0xfff, 0x841, 0x4, 0x2, 0x7, 0x3, 0xffffff1a, 0x4, 0x1f, 0x9, 0x1, 0x0, 0xfffffffb, 0x2, 0x7, 0x4, 0x8001, 0x0, 0x3, 0x3, 0x1, 0x4, 0x7]}, 0x45c)

18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x5, 0x1, {0x54, 0x7f, 0x9, {0x2, 0xb88}, {0x8000}, @rumble={0x3, 0x3}}, {0x55, 0x7, 0x6, {0x3ff, 0x8}, {0x7fff, 0x8}, @rumble={0x4, 0x20}}})

18:53:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x1) (async, rerun: 32)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0) (rerun: 32)
write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x14, 0x9, 0x5}, 0x18)

[ 1124.258772] input: syz1 as /devices/virtual/input/input11940
18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x7ffe, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x2, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0xab, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000))

18:53:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x7, 0x4, 0x2, 0x5f28}, 'syz0\x00', 0x49})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r2, 0x5502) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000))

18:53:28 executing program 5:
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x1, 0x8000, 0x0, 0x9c9c9c9c})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x1, 0x0, 0x9aa, 0x6}, 0x1b, [0x29c, 0x3, 0x4, 0x8e, 0x0, 0x8, 0x6, 0x5, 0x4, 0x6, 0x9, 0xc6, 0x1f, 0x4, 0xffff, 0x0, 0x528, 0x9, 0x1, 0x5, 0x800, 0x6, 0x3f, 0x800, 0xe71, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x7, 0x9, 0x8000, 0xab3, 0x5, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x3a1ae429, 0x71, 0x0, 0x0, 0x1, 0x10000, 0x200, 0x7, 0xfffff001, 0x1, 0x9, 0x9, 0xcf1, 0x1, 0x2, 0x7fff, 0xffff8000, 0xffff8001, 0x5, 0x1, 0x7, 0x2f74d37a, 0x8, 0x6], [0x2, 0x80000000, 0x3, 0x3, 0x3ae, 0x8, 0x0, 0x0, 0x7ff, 0x7, 0x101, 0x8001, 0x8, 0x8, 0xb8, 0x5, 0x1, 0x10000, 0x2, 0x6, 0x7, 0x5, 0xfffffffa, 0x4d4, 0x9, 0x0, 0x9, 0x7f4, 0x3, 0x1, 0x8, 0x7, 0x7, 0x272a85a4, 0x3, 0x9, 0x2, 0x5, 0x0, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0xffff, 0x7fff, 0x8, 0x9b7, 0xe4, 0x20, 0x8, 0x4, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x7, 0x9, 0x9, 0x80000000, 0x1, 0x1000, 0x4], [0xffff0905, 0xfff, 0xf65, 0x9, 0x7, 0xfffffffa, 0x9f, 0x200, 0x2, 0x1, 0x43, 0x4, 0x40, 0x5, 0x7fff, 0x6, 0x6e1, 0x4, 0x6, 0x1f, 0x7ff, 0x3, 0xcbd, 0x7fffffff, 0x1, 0x4, 0x4, 0x7, 0x20, 0x80000000, 0x50de, 0xd0b, 0xb961, 0x80, 0x0, 0xd0f0, 0x5, 0x7ff, 0x8000, 0x163, 0x80000001, 0xffff7129, 0x1ff, 0xfffffffe, 0x16, 0x10001, 0xcd7, 0x55, 0x1, 0x4, 0x87, 0x4136, 0x5, 0x1, 0x0, 0x3, 0x6, 0x63, 0x1000, 0x600, 0x0, 0xbe, 0x3f, 0xc92f], [0x0, 0x4, 0x401, 0x7fffffff, 0xfff, 0x1, 0x5, 0xfffffffc, 0x81, 0xfffffff8, 0x97, 0x9, 0x8, 0x6, 0x0, 0x40, 0x3a4, 0x4f, 0x3, 0x80000000, 0x1, 0x6, 0x101, 0x0, 0x2, 0x55, 0x80000001, 0x4, 0x0, 0x6b0, 0x1, 0x9c, 0x6, 0x40, 0x1f, 0x5, 0x8000, 0x4, 0x800, 0xff, 0xfff, 0x841, 0x4, 0x2, 0x7, 0x3, 0xffffff1a, 0x4, 0x1f, 0x9, 0x1, 0x0, 0xfffffffb, 0x2, 0x7, 0x4, 0x8001, 0x0, 0x3, 0x3, 0x1, 0x4, 0x7]}, 0x45c)
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x1, 0x8000, 0x0, 0x9c9c9c9c}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x1, 0x0, 0x9aa, 0x6}, 0x1b, [0x29c, 0x3, 0x4, 0x8e, 0x0, 0x8, 0x6, 0x5, 0x4, 0x6, 0x9, 0xc6, 0x1f, 0x4, 0xffff, 0x0, 0x528, 0x9, 0x1, 0x5, 0x800, 0x6, 0x3f, 0x800, 0xe71, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x7, 0x9, 0x8000, 0xab3, 0x5, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x3a1ae429, 0x71, 0x0, 0x0, 0x1, 0x10000, 0x200, 0x7, 0xfffff001, 0x1, 0x9, 0x9, 0xcf1, 0x1, 0x2, 0x7fff, 0xffff8000, 0xffff8001, 0x5, 0x1, 0x7, 0x2f74d37a, 0x8, 0x6], [0x2, 0x80000000, 0x3, 0x3, 0x3ae, 0x8, 0x0, 0x0, 0x7ff, 0x7, 0x101, 0x8001, 0x8, 0x8, 0xb8, 0x5, 0x1, 0x10000, 0x2, 0x6, 0x7, 0x5, 0xfffffffa, 0x4d4, 0x9, 0x0, 0x9, 0x7f4, 0x3, 0x1, 0x8, 0x7, 0x7, 0x272a85a4, 0x3, 0x9, 0x2, 0x5, 0x0, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0xffff, 0x7fff, 0x8, 0x9b7, 0xe4, 0x20, 0x8, 0x4, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x7, 0x9, 0x9, 0x80000000, 0x1, 0x1000, 0x4], [0xffff0905, 0xfff, 0xf65, 0x9, 0x7, 0xfffffffa, 0x9f, 0x200, 0x2, 0x1, 0x43, 0x4, 0x40, 0x5, 0x7fff, 0x6, 0x6e1, 0x4, 0x6, 0x1f, 0x7ff, 0x3, 0xcbd, 0x7fffffff, 0x1, 0x4, 0x4, 0x7, 0x20, 0x80000000, 0x50de, 0xd0b, 0xb961, 0x80, 0x0, 0xd0f0, 0x5, 0x7ff, 0x8000, 0x163, 0x80000001, 0xffff7129, 0x1ff, 0xfffffffe, 0x16, 0x10001, 0xcd7, 0x55, 0x1, 0x4, 0x87, 0x4136, 0x5, 0x1, 0x0, 0x3, 0x6, 0x63, 0x1000, 0x600, 0x0, 0xbe, 0x3f, 0xc92f], [0x0, 0x4, 0x401, 0x7fffffff, 0xfff, 0x1, 0x5, 0xfffffffc, 0x81, 0xfffffff8, 0x97, 0x9, 0x8, 0x6, 0x0, 0x40, 0x3a4, 0x4f, 0x3, 0x80000000, 0x1, 0x6, 0x101, 0x0, 0x2, 0x55, 0x80000001, 0x4, 0x0, 0x6b0, 0x1, 0x9c, 0x6, 0x40, 0x1f, 0x5, 0x8000, 0x4, 0x800, 0xff, 0xfff, 0x841, 0x4, 0x2, 0x7, 0x3, 0xffffff1a, 0x4, 0x1f, 0x9, 0x1, 0x0, 0xfffffffb, 0x2, 0x7, 0x4, 0x8001, 0x0, 0x3, 0x3, 0x1, 0x4, 0x7]}, 0x45c) (async)

[ 1124.304679] input: syz1 as /devices/virtual/input/input11941
18:53:28 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:28 executing program 5:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x16, 0x3}, 0x3d)

18:53:28 executing program 1:
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000011c0)={&(0x7f0000001100)=[0xf56fead, 0x5], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xc0c0c0c0})
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x103, 0x46040)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x90000000, 0x6, 0x14, 0x1d, "4853f34ee97fdff8d6b3a96059b353908cdf4b97d127bbb50109879b1b8ec64661ee5009f741c5ef7dbea786fd900be55ad0285d48993f4a7709069292402067", "3ce4951465ebe4fc326d4f4ca157d5256330d5a033bed08ddbacfea8b22b2703", [0x5, 0xffff]})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = semget$private(0x0, 0x0, 0x640)
semop(r1, &(0x7f0000000000)=[{0x2, 0x4, 0x1000}, {0x2, 0x29a, 0x800}], 0x2)
semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000010c0)=""/27)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000040)=""/4096)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000020c0)=""/4107)
semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000001040)=""/120)
semop(r1, &(0x7f00000000c0)=[{0x0, 0xfffe, 0x1800}], 0x1)

[ 1124.378511] input: syz1 as /devices/virtual/input/input11943
[ 1124.391182] input: syz1 as /devices/virtual/input/input11944
[ 1124.397191] input: syz1 as /devices/virtual/input/input11945
18:53:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x7ffe, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x2, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0xab, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async, rerun: 64)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) (rerun: 64)

18:53:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x4, 0x7, {0x52, 0x52, 0x1f, {0x6, 0x800}, {0x9, 0x9}, @period={0x5c, 0x8, 0x7ff, 0x81, 0x9, {0x2b6, 0x4, 0x5, 0x949c}, 0x3, &(0x7f0000000040)=[0x0, 0xff2, 0x7]}}, {0x5, 0x8000, 0x5, {0xd84, 0x3}, {0x4, 0x925}, @rumble={0x7, 0x81}}})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:28 executing program 5:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x16, 0x3}, 0x3d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x16, 0x3}, 0x3d) (async)

[ 1124.447403] input: syz1 as /devices/virtual/input/input11946
18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x7, 0x4, 0x2, 0x5f28}, 'syz0\x00', 0x49})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000))
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x7, 0x4, 0x2, 0x5f28}, 'syz0\x00', 0x49}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_DEV_DESTROY(r2, 0x5502) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)) (async)

18:53:29 executing program 1:
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000011c0)={&(0x7f0000001100)=[0xf56fead, 0x5], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xc0c0c0c0})
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x103, 0x46040)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x90000000, 0x6, 0x14, 0x1d, "4853f34ee97fdff8d6b3a96059b353908cdf4b97d127bbb50109879b1b8ec64661ee5009f741c5ef7dbea786fd900be55ad0285d48993f4a7709069292402067", "3ce4951465ebe4fc326d4f4ca157d5256330d5a033bed08ddbacfea8b22b2703", [0x5, 0xffff]}) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = semget$private(0x0, 0x0, 0x640)
semop(r1, &(0x7f0000000000)=[{0x2, 0x4, 0x1000}, {0x2, 0x29a, 0x800}], 0x2)
semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000010c0)=""/27) (async)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000040)=""/4096) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000020c0)=""/4107)
semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000001040)=""/120) (async)
semop(r1, &(0x7f00000000c0)=[{0x0, 0xfffe, 0x1800}], 0x1)

18:53:29 executing program 5:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x16, 0x3}, 0x3d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}, 0x16, 0x3}, 0x3d) (async)

18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1124.542755] input: syz1 as /devices/virtual/input/input11948
[ 1124.568133] input: syz1 as /devices/virtual/input/input11949
[ 1124.579630] input: syz1 as /devices/virtual/input/input11950
[ 1124.586712] input: syz1 as /devices/virtual/input/input11951
18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x7ffe, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x2, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0xab, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000))
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x7ffe, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x2, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0xab, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) (async)

18:53:29 executing program 1:
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000011c0)={&(0x7f0000001100)=[0xf56fead, 0x5], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xc0c0c0c0}) (async, rerun: 32)
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x103, 0x46040) (rerun: 32)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x90000000, 0x6, 0x14, 0x1d, "4853f34ee97fdff8d6b3a96059b353908cdf4b97d127bbb50109879b1b8ec64661ee5009f741c5ef7dbea786fd900be55ad0285d48993f4a7709069292402067", "3ce4951465ebe4fc326d4f4ca157d5256330d5a033bed08ddbacfea8b22b2703", [0x5, 0xffff]}) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = semget$private(0x0, 0x0, 0x640)
semop(r1, &(0x7f0000000000)=[{0x2, 0x4, 0x1000}, {0x2, 0x29a, 0x800}], 0x2) (async)
semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000010c0)=""/27)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000040)=""/4096)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000020c0)=""/4107) (async)
semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000001040)=""/120)
semop(r1, &(0x7f00000000c0)=[{0x0, 0xfffe, 0x1800}], 0x1)

18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="c3436ea0c10ac1ff2876187a9ea1cb6217bb7817d0dcd964e38bd6f6c2e685e1ffb7a9685db3c24c9e65c972e88c24b8660b1ded1bad03b756b650036c2348faafd88e4e3681170814654a569161a544e2e1a88c4e697d92687950a52ddb9fd332de2d40971d2e3e7f6093dda8a5121347aead59880335b17d8a42ddba054e9547579ec5696738b458ea41cd88b8e03edeb4fa8fd3e230655f4d21bdaf09fa8b359ca1f2d3f8f76d48d794d0dc7d30061acf704910aeff1a", 0xb8)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$RTC_WIE_ON(r2, 0x700f)

18:53:29 executing program 5:
semget$private(0x0, 0x8171fd05b400feba, 0x20)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

[ 1124.644814] input: syz1 as /devices/virtual/input/input11953
18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="c3436ea0c10ac1ff2876187a9ea1cb6217bb7817d0dcd964e38bd6f6c2e685e1ffb7a9685db3c24c9e65c972e88c24b8660b1ded1bad03b756b650036c2348faafd88e4e3681170814654a569161a544e2e1a88c4e697d92687950a52ddb9fd332de2d40971d2e3e7f6093dda8a5121347aead59880335b17d8a42ddba054e9547579ec5696738b458ea41cd88b8e03edeb4fa8fd3e230655f4d21bdaf09fa8b359ca1f2d3f8f76d48d794d0dc7d30061acf704910aeff1a", 0xb8)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$RTC_WIE_ON(r2, 0x700f)

18:53:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x2, 0x400, 0x7304, 0x9})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x12, 0x0, 0x0, "8ef99a8801bd2014d35bbbbb9900239255fc263aff68a4e50e32e1d6a28c641f7f0b8b3ff7f7c150f22eaf4dd6a3c1d5cb0be871557e2449f47483065097c745", "bf61609aa37ee74eb14663dc011c2b42dd7b5f6d0fe9cb9d1eaed7a4c163b214a53a3c64d3fb2658d0a2f47c1d7505ee14e40a75b89d9b23b175c30f26d275cd", "059565fe381b0ca501f3bb230e890e0e872c1a4cb39a600c40b6951781e6fc45", [0xffffffffffff08a3, 0x5]})

18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:29 executing program 5:
semget$private(0x0, 0x8171fd05b400feba, 0x20)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="c3436ea0c10ac1ff2876187a9ea1cb6217bb7817d0dcd964e38bd6f6c2e685e1ffb7a9685db3c24c9e65c972e88c24b8660b1ded1bad03b756b650036c2348faafd88e4e3681170814654a569161a544e2e1a88c4e697d92687950a52ddb9fd332de2d40971d2e3e7f6093dda8a5121347aead59880335b17d8a42ddba054e9547579ec5696738b458ea41cd88b8e03edeb4fa8fd3e230655f4d21bdaf09fa8b359ca1f2d3f8f76d48d794d0dc7d30061acf704910aeff1a", 0xb8)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$RTC_WIE_ON(r2, 0x700f)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="c3436ea0c10ac1ff2876187a9ea1cb6217bb7817d0dcd964e38bd6f6c2e685e1ffb7a9685db3c24c9e65c972e88c24b8660b1ded1bad03b756b650036c2348faafd88e4e3681170814654a569161a544e2e1a88c4e697d92687950a52ddb9fd332de2d40971d2e3e7f6093dda8a5121347aead59880335b17d8a42ddba054e9547579ec5696738b458ea41cd88b8e03edeb4fa8fd3e230655f4d21bdaf09fa8b359ca1f2d3f8f76d48d794d0dc7d30061acf704910aeff1a", 0xb8) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$RTC_WIE_ON(r2, 0x700f) (async)

18:53:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0xffffffe1)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x7, 0x1000, 0x2a7, 0x4}, 'syz1\x00', 0x33})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x7e)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe04b, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1124.761095] input: syz1 as /devices/virtual/input/input11955
[ 1124.788288] input: syz1 as /devices/virtual/input/input11956
18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:29 executing program 5:
semget$private(0x0, 0x8171fd05b400feba, 0x20) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x2, 0x400, 0x7304, 0x9}) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x12, 0x0, 0x0, "8ef99a8801bd2014d35bbbbb9900239255fc263aff68a4e50e32e1d6a28c641f7f0b8b3ff7f7c150f22eaf4dd6a3c1d5cb0be871557e2449f47483065097c745", "bf61609aa37ee74eb14663dc011c2b42dd7b5f6d0fe9cb9d1eaed7a4c163b214a53a3c64d3fb2658d0a2f47c1d7505ee14e40a75b89d9b23b175c30f26d275cd", "059565fe381b0ca501f3bb230e890e0e872c1a4cb39a600c40b6951781e6fc45", [0xffffffffffff08a3, 0x5]})

18:53:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0))
r2 = syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x880)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080))

18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x80, 0x4}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0x41c8, [{0xe, 0x5, 0x1}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x39}]}, {0x0, [0x5f, 0x30, 0xf63c7a42a833c44e, 0x93, 0x0, 0x0, 0x5f]}}, &(0x7f0000000700)=""/165, 0x59, 0xa5}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x1, 0x8, 0x19c40000, 0x100, 0x1, 0xdcd7, '\x00', 0x0, r2, 0x5, 0x2, 0x4}, 0x48)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0xc, 0xb8f, 0x7f})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000140)={0x5, 0xc, {0x52, 0x1, 0x8000, {0x81, 0x1b}, {0x0, 0x8}, @ramp={0xd5, 0x7, {0x75, 0xff, 0x3, 0x80}}}, {0x51, 0x1f, 0x18, {0x0, 0xfbff}, {0x2, 0x8}, @const={0x86ba, {0x1, 0x5, 0x5, 0xa7ee}}}})

18:53:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x2, 0x400, 0x7304, 0x9})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x12, 0x0, 0x0, "8ef99a8801bd2014d35bbbbb9900239255fc263aff68a4e50e32e1d6a28c641f7f0b8b3ff7f7c150f22eaf4dd6a3c1d5cb0be871557e2449f47483065097c745", "bf61609aa37ee74eb14663dc011c2b42dd7b5f6d0fe9cb9d1eaed7a4c163b214a53a3c64d3fb2658d0a2f47c1d7505ee14e40a75b89d9b23b175c30f26d275cd", "059565fe381b0ca501f3bb230e890e0e872c1a4cb39a600c40b6951781e6fc45", [0xffffffffffff08a3, 0x5]})
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x2, 0x400, 0x7304, 0x9}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x12, 0x0, 0x0, "8ef99a8801bd2014d35bbbbb9900239255fc263aff68a4e50e32e1d6a28c641f7f0b8b3ff7f7c150f22eaf4dd6a3c1d5cb0be871557e2449f47483065097c745", "bf61609aa37ee74eb14663dc011c2b42dd7b5f6d0fe9cb9d1eaed7a4c163b214a53a3c64d3fb2658d0a2f47c1d7505ee14e40a75b89d9b23b175c30f26d275cd", "059565fe381b0ca501f3bb230e890e0e872c1a4cb39a600c40b6951781e6fc45", [0xffffffffffff08a3, 0x5]}) (async)

18:53:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0xffffffe1) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x7, 0x1000, 0x2a7, 0x4}, 'syz1\x00', 0x33})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async, rerun: 32)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x7e) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe04b, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1124.943307] input: syz1 as /devices/virtual/input/input11958
[ 1124.946958] input: syz1 as /devices/virtual/input/input11959
[ 1124.968846] input: syz1 as /devices/virtual/input/input11961
18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 64)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x80, 0x4}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0x41c8, [{0xe, 0x5, 0x1}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x39}]}, {0x0, [0x5f, 0x30, 0xf63c7a42a833c44e, 0x93, 0x0, 0x0, 0x5f]}}, &(0x7f0000000700)=""/165, 0x59, 0xa5}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x1, 0x8, 0x19c40000, 0x100, 0x1, 0xdcd7, '\x00', 0x0, r2, 0x5, 0x2, 0x4}, 0x48) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0xc, 0xb8f, 0x7f}) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async, rerun: 32)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000140)={0x5, 0xc, {0x52, 0x1, 0x8000, {0x81, 0x1b}, {0x0, 0x8}, @ramp={0xd5, 0x7, {0x75, 0xff, 0x3, 0x80}}}, {0x51, 0x1f, 0x18, {0x0, 0xfbff}, {0x2, 0x8}, @const={0x86ba, {0x1, 0x5, 0x5, 0xa7ee}}}})

[ 1125.045518] input: syz1 as /devices/virtual/input/input11962
[ 1125.067137] input: syz1 as /devices/virtual/input/input11963
18:53:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0xffffffe1)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x7, 0x1000, 0x2a7, 0x4}, 'syz1\x00', 0x33})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x7e)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe04b, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) (async)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0xffffffe1) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x7, 0x1000, 0x2a7, 0x4}, 'syz1\x00', 0x33}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x7e) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe04b, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) (async)
r2 = syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x880)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080))

18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1125.091720] input: syz1 as /devices/virtual/input/input11965
[ 1125.100408] input: syz1 as /devices/virtual/input/input11966
18:53:29 executing program 1:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80))

18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x80, 0x4}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0x41c8, [{0xe, 0x5, 0x1}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x39}]}, {0x0, [0x5f, 0x30, 0xf63c7a42a833c44e, 0x93, 0x0, 0x0, 0x5f]}}, &(0x7f0000000700)=""/165, 0x59, 0xa5}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x1, 0x8, 0x19c40000, 0x100, 0x1, 0xdcd7, '\x00', 0x0, r2, 0x5, 0x2, 0x4}, 0x48) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0xc, 0xb8f, 0x7f})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000140)={0x5, 0xc, {0x52, 0x1, 0x8000, {0x81, 0x1b}, {0x0, 0x8}, @ramp={0xd5, 0x7, {0x75, 0xff, 0x3, 0x80}}}, {0x51, 0x1f, 0x18, {0x0, 0xfbff}, {0x2, 0x8}, @const={0x86ba, {0x1, 0x5, 0x5, 0xa7ee}}}})

[ 1125.147929] input: syz1 as /devices/virtual/input/input11967
[ 1125.150855] input: syz1 as /devices/virtual/input/input11968
18:53:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) (async)
r2 = syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x880)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080))

18:53:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x4, 0xfffb}, 0x31, [0x0, 0x1000, 0xffff, 0x1000, 0x7, 0x6, 0x2, 0x20, 0x5, 0x7f, 0x884e, 0x40, 0x6, 0x7f, 0x6, 0x99, 0x1, 0x6, 0x6, 0x8, 0xb1, 0x1, 0x6, 0x9, 0xffffff3b, 0x9, 0x7ff, 0x9, 0x200, 0x3, 0x7, 0x101, 0x200, 0x0, 0xc49d, 0x1, 0x1ff, 0x7ff, 0x5, 0x276f4c06, 0x8, 0x8, 0x4, 0x5, 0x1, 0xff, 0x3, 0x5, 0x0, 0x140666f3, 0x4, 0x7fff, 0x2, 0x6000, 0x8, 0x7, 0x4, 0xfff, 0xffff, 0x7, 0xcb, 0xffffff80, 0x8001, 0x4], [0xfc, 0x8, 0x0, 0x9, 0xfe89, 0x5, 0x200, 0x2, 0x400, 0x8000, 0x80000000, 0x9, 0x1, 0x5, 0x2, 0x8, 0x20, 0x10f, 0x9, 0x6, 0xfff, 0x3, 0x6, 0x2, 0x6, 0x5, 0x4, 0x1, 0x3e55, 0x9, 0x7fff, 0x7fff, 0x5f8, 0x9, 0x1, 0x4, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0x6, 0x400, 0x200, 0x23d1, 0xac1, 0x2d74, 0x4, 0x5, 0x7, 0xf6, 0x0, 0x80, 0x7ff, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x313, 0x4, 0x1000, 0x7, 0x5e], [0x2, 0x5, 0x2, 0x6c5b, 0x6, 0x0, 0x7ff, 0x44c1, 0x8, 0x3, 0x8, 0x4, 0x6, 0x768, 0xdcf, 0x1, 0xfffffffa, 0x81, 0xfffff800, 0x1, 0x100, 0x7, 0x199, 0x9, 0x10000, 0x80, 0x8, 0x7, 0x1f, 0x8, 0x1dc4, 0x7f, 0x4, 0x9, 0x2, 0x20, 0x800, 0xc8, 0x5, 0xfff, 0x9, 0x3ff, 0x8001, 0x7fffffff, 0x8, 0x0, 0x0, 0x100, 0x5, 0xffff, 0x5, 0x2, 0x0, 0xfffffffe, 0x2, 0x2, 0x9, 0x1000, 0x400, 0x44, 0x9, 0x3, 0x7, 0x3], [0x0, 0x6f8, 0x401, 0x7f, 0xffffff00, 0x100, 0x8, 0x3, 0x0, 0xffff, 0x4, 0x3ff, 0x1, 0x3, 0x81, 0x0, 0x4ac, 0x9, 0x1, 0x7, 0xfffffffa, 0xfb, 0xb0, 0x3ff, 0x6, 0x3060, 0xffffff84, 0x20, 0x60ca, 0x10000, 0x9, 0x0, 0x86, 0x7f, 0x527, 0x5, 0x68, 0xfce5635, 0x401, 0x0, 0xdf6, 0x6487, 0x6, 0x100, 0x80000001, 0x5, 0xb2, 0x2, 0x400, 0xfffff800, 0x6, 0x9, 0x8, 0xfffffe00, 0x1000, 0x1, 0x8, 0x8, 0xffffffff, 0x80000001, 0x7, 0x7ff, 0x768, 0x5]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x8, 0x4, 0x400, 0x5]}, 0x45c)

[ 1125.238055] input: syz1 as /devices/virtual/input/input11970
18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000180))
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0xa, 0xffffffff, 0x101})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xd, 0x7fffffff, {0x55, 0x2, 0xa9f, {0x994, 0x401}, {0x5, 0x9}, @ramp={0x8001, 0x5, {0x5, 0x8, 0x8, 0x1}}}, {0x55, 0x7, 0x100, {0x89, 0x9}, {0x4}, @ramp={0x2, 0x401, {0x10, 0x4e, 0x101, 0x4}}}})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)

18:53:29 executing program 1:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80))

18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r1, 0x5501)

[ 1125.280530] input: syz1 as /devices/virtual/input/input11971
[ 1125.294974] input: syz1 as /devices/virtual/input/input11972
18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:29 executing program 1:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80))
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80)) (async)

[ 1125.332855] input: syz1 as /devices/virtual/input/input11973
[ 1125.344945] input: syz1 as /devices/virtual/input/input11974
18:53:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000180)) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0xa, 0xffffffff, 0x101}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xd, 0x7fffffff, {0x55, 0x2, 0xa9f, {0x994, 0x401}, {0x5, 0x9}, @ramp={0x8001, 0x5, {0x5, 0x8, 0x8, 0x1}}}, {0x55, 0x7, 0x100, {0x89, 0x9}, {0x4}, @ramp={0x2, 0x401, {0x10, 0x4e, 0x101, 0x4}}}}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)

18:53:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x4, 0xfffb}, 0x31, [0x0, 0x1000, 0xffff, 0x1000, 0x7, 0x6, 0x2, 0x20, 0x5, 0x7f, 0x884e, 0x40, 0x6, 0x7f, 0x6, 0x99, 0x1, 0x6, 0x6, 0x8, 0xb1, 0x1, 0x6, 0x9, 0xffffff3b, 0x9, 0x7ff, 0x9, 0x200, 0x3, 0x7, 0x101, 0x200, 0x0, 0xc49d, 0x1, 0x1ff, 0x7ff, 0x5, 0x276f4c06, 0x8, 0x8, 0x4, 0x5, 0x1, 0xff, 0x3, 0x5, 0x0, 0x140666f3, 0x4, 0x7fff, 0x2, 0x6000, 0x8, 0x7, 0x4, 0xfff, 0xffff, 0x7, 0xcb, 0xffffff80, 0x8001, 0x4], [0xfc, 0x8, 0x0, 0x9, 0xfe89, 0x5, 0x200, 0x2, 0x400, 0x8000, 0x80000000, 0x9, 0x1, 0x5, 0x2, 0x8, 0x20, 0x10f, 0x9, 0x6, 0xfff, 0x3, 0x6, 0x2, 0x6, 0x5, 0x4, 0x1, 0x3e55, 0x9, 0x7fff, 0x7fff, 0x5f8, 0x9, 0x1, 0x4, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0x6, 0x400, 0x200, 0x23d1, 0xac1, 0x2d74, 0x4, 0x5, 0x7, 0xf6, 0x0, 0x80, 0x7ff, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x313, 0x4, 0x1000, 0x7, 0x5e], [0x2, 0x5, 0x2, 0x6c5b, 0x6, 0x0, 0x7ff, 0x44c1, 0x8, 0x3, 0x8, 0x4, 0x6, 0x768, 0xdcf, 0x1, 0xfffffffa, 0x81, 0xfffff800, 0x1, 0x100, 0x7, 0x199, 0x9, 0x10000, 0x80, 0x8, 0x7, 0x1f, 0x8, 0x1dc4, 0x7f, 0x4, 0x9, 0x2, 0x20, 0x800, 0xc8, 0x5, 0xfff, 0x9, 0x3ff, 0x8001, 0x7fffffff, 0x8, 0x0, 0x0, 0x100, 0x5, 0xffff, 0x5, 0x2, 0x0, 0xfffffffe, 0x2, 0x2, 0x9, 0x1000, 0x400, 0x44, 0x9, 0x3, 0x7, 0x3], [0x0, 0x6f8, 0x401, 0x7f, 0xffffff00, 0x100, 0x8, 0x3, 0x0, 0xffff, 0x4, 0x3ff, 0x1, 0x3, 0x81, 0x0, 0x4ac, 0x9, 0x1, 0x7, 0xfffffffa, 0xfb, 0xb0, 0x3ff, 0x6, 0x3060, 0xffffff84, 0x20, 0x60ca, 0x10000, 0x9, 0x0, 0x86, 0x7f, 0x527, 0x5, 0x68, 0xfce5635, 0x401, 0x0, 0xdf6, 0x6487, 0x6, 0x100, 0x80000001, 0x5, 0xb2, 0x2, 0x400, 0xfffff800, 0x6, 0x9, 0x8, 0xfffffe00, 0x1000, 0x1, 0x8, 0x8, 0xffffffff, 0x80000001, 0x7, 0x7ff, 0x768, 0x5]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x8, 0x4, 0x400, 0x5]}, 0x45c)

[ 1125.411433] input: syz1 as /devices/virtual/input/input11975
18:53:29 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x800, 0x0, <r0=>0xffffffffffffffff})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:29 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:29 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:30 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x4, 0xfffb}, 0x31, [0x0, 0x1000, 0xffff, 0x1000, 0x7, 0x6, 0x2, 0x20, 0x5, 0x7f, 0x884e, 0x40, 0x6, 0x7f, 0x6, 0x99, 0x1, 0x6, 0x6, 0x8, 0xb1, 0x1, 0x6, 0x9, 0xffffff3b, 0x9, 0x7ff, 0x9, 0x200, 0x3, 0x7, 0x101, 0x200, 0x0, 0xc49d, 0x1, 0x1ff, 0x7ff, 0x5, 0x276f4c06, 0x8, 0x8, 0x4, 0x5, 0x1, 0xff, 0x3, 0x5, 0x0, 0x140666f3, 0x4, 0x7fff, 0x2, 0x6000, 0x8, 0x7, 0x4, 0xfff, 0xffff, 0x7, 0xcb, 0xffffff80, 0x8001, 0x4], [0xfc, 0x8, 0x0, 0x9, 0xfe89, 0x5, 0x200, 0x2, 0x400, 0x8000, 0x80000000, 0x9, 0x1, 0x5, 0x2, 0x8, 0x20, 0x10f, 0x9, 0x6, 0xfff, 0x3, 0x6, 0x2, 0x6, 0x5, 0x4, 0x1, 0x3e55, 0x9, 0x7fff, 0x7fff, 0x5f8, 0x9, 0x1, 0x4, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0x6, 0x400, 0x200, 0x23d1, 0xac1, 0x2d74, 0x4, 0x5, 0x7, 0xf6, 0x0, 0x80, 0x7ff, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x313, 0x4, 0x1000, 0x7, 0x5e], [0x2, 0x5, 0x2, 0x6c5b, 0x6, 0x0, 0x7ff, 0x44c1, 0x8, 0x3, 0x8, 0x4, 0x6, 0x768, 0xdcf, 0x1, 0xfffffffa, 0x81, 0xfffff800, 0x1, 0x100, 0x7, 0x199, 0x9, 0x10000, 0x80, 0x8, 0x7, 0x1f, 0x8, 0x1dc4, 0x7f, 0x4, 0x9, 0x2, 0x20, 0x800, 0xc8, 0x5, 0xfff, 0x9, 0x3ff, 0x8001, 0x7fffffff, 0x8, 0x0, 0x0, 0x100, 0x5, 0xffff, 0x5, 0x2, 0x0, 0xfffffffe, 0x2, 0x2, 0x9, 0x1000, 0x400, 0x44, 0x9, 0x3, 0x7, 0x3], [0x0, 0x6f8, 0x401, 0x7f, 0xffffff00, 0x100, 0x8, 0x3, 0x0, 0xffff, 0x4, 0x3ff, 0x1, 0x3, 0x81, 0x0, 0x4ac, 0x9, 0x1, 0x7, 0xfffffffa, 0xfb, 0xb0, 0x3ff, 0x6, 0x3060, 0xffffff84, 0x20, 0x60ca, 0x10000, 0x9, 0x0, 0x86, 0x7f, 0x527, 0x5, 0x68, 0xfce5635, 0x401, 0x0, 0xdf6, 0x6487, 0x6, 0x100, 0x80000001, 0x5, 0xb2, 0x2, 0x400, 0xfffff800, 0x6, 0x9, 0x8, 0xfffffe00, 0x1000, 0x1, 0x8, 0x8, 0xffffffff, 0x80000001, 0x7, 0x7ff, 0x768, 0x5]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x8, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x4, 0xfffb}, 0x31, [0x0, 0x1000, 0xffff, 0x1000, 0x7, 0x6, 0x2, 0x20, 0x5, 0x7f, 0x884e, 0x40, 0x6, 0x7f, 0x6, 0x99, 0x1, 0x6, 0x6, 0x8, 0xb1, 0x1, 0x6, 0x9, 0xffffff3b, 0x9, 0x7ff, 0x9, 0x200, 0x3, 0x7, 0x101, 0x200, 0x0, 0xc49d, 0x1, 0x1ff, 0x7ff, 0x5, 0x276f4c06, 0x8, 0x8, 0x4, 0x5, 0x1, 0xff, 0x3, 0x5, 0x0, 0x140666f3, 0x4, 0x7fff, 0x2, 0x6000, 0x8, 0x7, 0x4, 0xfff, 0xffff, 0x7, 0xcb, 0xffffff80, 0x8001, 0x4], [0xfc, 0x8, 0x0, 0x9, 0xfe89, 0x5, 0x200, 0x2, 0x400, 0x8000, 0x80000000, 0x9, 0x1, 0x5, 0x2, 0x8, 0x20, 0x10f, 0x9, 0x6, 0xfff, 0x3, 0x6, 0x2, 0x6, 0x5, 0x4, 0x1, 0x3e55, 0x9, 0x7fff, 0x7fff, 0x5f8, 0x9, 0x1, 0x4, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0x6, 0x400, 0x200, 0x23d1, 0xac1, 0x2d74, 0x4, 0x5, 0x7, 0xf6, 0x0, 0x80, 0x7ff, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x313, 0x4, 0x1000, 0x7, 0x5e], [0x2, 0x5, 0x2, 0x6c5b, 0x6, 0x0, 0x7ff, 0x44c1, 0x8, 0x3, 0x8, 0x4, 0x6, 0x768, 0xdcf, 0x1, 0xfffffffa, 0x81, 0xfffff800, 0x1, 0x100, 0x7, 0x199, 0x9, 0x10000, 0x80, 0x8, 0x7, 0x1f, 0x8, 0x1dc4, 0x7f, 0x4, 0x9, 0x2, 0x20, 0x800, 0xc8, 0x5, 0xfff, 0x9, 0x3ff, 0x8001, 0x7fffffff, 0x8, 0x0, 0x0, 0x100, 0x5, 0xffff, 0x5, 0x2, 0x0, 0xfffffffe, 0x2, 0x2, 0x9, 0x1000, 0x400, 0x44, 0x9, 0x3, 0x7, 0x3], [0x0, 0x6f8, 0x401, 0x7f, 0xffffff00, 0x100, 0x8, 0x3, 0x0, 0xffff, 0x4, 0x3ff, 0x1, 0x3, 0x81, 0x0, 0x4ac, 0x9, 0x1, 0x7, 0xfffffffa, 0xfb, 0xb0, 0x3ff, 0x6, 0x3060, 0xffffff84, 0x20, 0x60ca, 0x10000, 0x9, 0x0, 0x86, 0x7f, 0x527, 0x5, 0x68, 0xfce5635, 0x401, 0x0, 0xdf6, 0x6487, 0x6, 0x100, 0x80000001, 0x5, 0xb2, 0x2, 0x400, 0xfffff800, 0x6, 0x9, 0x8, 0xfffffe00, 0x1000, 0x1, 0x8, 0x8, 0xffffffff, 0x80000001, 0x7, 0x7ff, 0x768, 0x5]}, 0x45c) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x8, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000180))
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0xa, 0xffffffff, 0x101})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xd, 0x7fffffff, {0x55, 0x2, 0xa9f, {0x994, 0x401}, {0x5, 0x9}, @ramp={0x8001, 0x5, {0x5, 0x8, 0x8, 0x1}}}, {0x55, 0x7, 0x100, {0x89, 0x9}, {0x4}, @ramp={0x2, 0x401, {0x10, 0x4e, 0x101, 0x4}}}})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000180)) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0xa, 0xffffffff, 0x101}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xd, 0x7fffffff, {0x55, 0x2, 0xa9f, {0x994, 0x401}, {0x5, 0x9}, @ramp={0x8001, 0x5, {0x5, 0x8, 0x8, 0x1}}}, {0x55, 0x7, 0x100, {0x89, 0x9}, {0x4}, @ramp={0x2, 0x401, {0x10, 0x4e, 0x101, 0x4}}}}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)

[ 1125.489635] input: syz1 as /devices/virtual/input/input11977
18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:30 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x800, 0x0, <r0=>0xffffffffffffffff})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

[ 1125.555481] input: syz1 as /devices/virtual/input/input11979
[ 1125.595482] input: syz1 as /devices/virtual/input/input11981
18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:30 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1125.604088] input: syz1 as /devices/virtual/input/input11982
18:53:30 executing program 2:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x14, ""/20})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x35cc, 0x1, 0x9b8], 0x3, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000080)=0x9)
syz_open_dev$loop(&(0x7f0000000100), 0x45d5, 0x264100)

18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x3}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x400240, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x10000, 0x80000001], 0x3, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000280)={0xa, 0x400, {0x54, 0x5, 0x9, {0x7, 0x5}, {0x5, 0x9}, @period={0x5c, 0x8, 0x7, 0x787a, 0x9, {0xee1c, 0xfe, 0x2, 0x4}, 0x1, &(0x7f00000001c0)=[0xa8]}}, {0x56, 0xff, 0x2, {0x400, 0x1}, {0x6, 0x5}, @const={0x1000, {0x3, 0x5, 0x2, 0x18d}}}})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={r3, 0x1})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x280000, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x1ff)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x101, 0x9, 0x8, 0x5, 0x1, 0x300000, 0x3], 0x7, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x12)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r6, 0x8004af70, &(0x7f0000000380))
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000340)={0x4, 0x9, 0xfffffff7, 0xb3})

18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x3}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:30 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x800, 0x0, <r0=>0xffffffffffffffff})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:30 executing program 2:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x14, ""/20}) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x35cc, 0x1, 0x9b8], 0x3, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000080)=0x9) (async)
syz_open_dev$loop(&(0x7f0000000100), 0x45d5, 0x264100)

[ 1125.686261] input: syz1 as /devices/virtual/input/input11983
[ 1125.713681] input: syz1 as /devices/virtual/input/input11985
18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x3}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (rerun: 32)

18:53:30 executing program 2:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x14, ""/20})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x35cc, 0x1, 0x9b8], 0x3, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000080)=0x9)
syz_open_dev$loop(&(0x7f0000000100), 0x45d5, 0x264100)

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x400240, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x10000, 0x80000001], 0x3, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000280)={0xa, 0x400, {0x54, 0x5, 0x9, {0x7, 0x5}, {0x5, 0x9}, @period={0x5c, 0x8, 0x7, 0x787a, 0x9, {0xee1c, 0xfe, 0x2, 0x4}, 0x1, &(0x7f00000001c0)=[0xa8]}}, {0x56, 0xff, 0x2, {0x400, 0x1}, {0x6, 0x5}, @const={0x1000, {0x3, 0x5, 0x2, 0x18d}}}})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={r3, 0x1}) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x280000, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x1ff) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x101, 0x9, 0x8, 0x5, 0x1, 0x300000, 0x3], 0x7, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x12) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r6, 0x8004af70, &(0x7f0000000380))
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000340)={0x4, 0x9, 0xfffffff7, 0xb3})

18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1125.811549] input: syz1 as /devices/virtual/input/input11989
[ 1125.833114] input: syz1 as /devices/virtual/input/input11991
18:53:30 executing program 1:
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2})
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040))
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x19, 0x141000)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:30 executing program 1:
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2}) (async)
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) (async)
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x19, 0x141000)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x400240, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x10000, 0x80000001], 0x3, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000280)={0xa, 0x400, {0x54, 0x5, 0x9, {0x7, 0x5}, {0x5, 0x9}, @period={0x5c, 0x8, 0x7, 0x787a, 0x9, {0xee1c, 0xfe, 0x2, 0x4}, 0x1, &(0x7f00000001c0)=[0xa8]}}, {0x56, 0xff, 0x2, {0x400, 0x1}, {0x6, 0x5}, @const={0x1000, {0x3, 0x5, 0x2, 0x18d}}}}) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={r3, 0x1}) (async, rerun: 32)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x280000, 0x0) (async, rerun: 32)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x1ff) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x101, 0x9, 0x8, 0x5, 0x1, 0x300000, 0x3], 0x7, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x12) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r6, 0x8004af70, &(0x7f0000000380)) (async)
ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000340)={0x4, 0x9, 0xfffffff7, 0xb3})

18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1125.975975] input: syz1 as /devices/virtual/input/input11995
[ 1125.976106] input: syz1 as /devices/virtual/input/input11996
[ 1125.992235] input: syz1 as /devices/virtual/input/input11997
18:53:30 executing program 2:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000003b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500d728f700000000000000"])
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=""/23, &(0x7f0000000100)=""/90, &(0x7f0000000c80)=""/4096, 0x2})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:30 executing program 1:
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2}) (async)
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040))
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x19, 0x141000)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:30 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4900, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180))
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0xc004)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x2, 0x37, 0x2})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xec, 0x4, 0x100, 0x1})
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x7, 0x8, 0x1, 0x40, 0xd7, 0x63737ff9, 0x3, 0x800], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000440)={0x1, 0x66, &(0x7f00000003c0)=""/102})
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))

18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:30 executing program 2:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000003b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500d728f700000000000000"])
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=""/23, &(0x7f0000000100)=""/90, &(0x7f0000000c80)=""/4096, 0x2})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000003b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500d728f700000000000000"]) (async)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=""/23, &(0x7f0000000100)=""/90, &(0x7f0000000c80)=""/4096, 0x2}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)

[ 1126.118115] input: syz1 as /devices/virtual/input/input11998
[ 1126.120827] input: syz1 as /devices/virtual/input/input11999
[ 1126.146412] input: syz1 as /devices/virtual/input/input12000
18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000))
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:30 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4900, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180)) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0xc004)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x2, 0x37, 0x2})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xec, 0x4, 0x100, 0x1}) (async)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x7, 0x8, 0x1, 0x40, 0xd7, 0x63737ff9, 0x3, 0x800], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000440)={0x1, 0x66, &(0x7f00000003c0)=""/102}) (async)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))

18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1126.260831] input: syz1 as /devices/virtual/input/input12001
[ 1126.267301] input: syz1 as /devices/virtual/input/input12002
[ 1126.286545] input: syz1 as /devices/virtual/input/input12004
18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:30 executing program 2:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000003b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500d728f700000000000000"]) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=""/23, &(0x7f0000000100)=""/90, &(0x7f0000000c80)=""/4096, 0x2}) (rerun: 32)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1126.315377] input: syz1 as /devices/virtual/input/input12005
18:53:30 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4900, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180))
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0xc004)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x2, 0x37, 0x2})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xec, 0x4, 0x100, 0x1})
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x7, 0x8, 0x1, 0x40, 0xd7, 0x63737ff9, 0x3, 0x800], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000440)={0x1, 0x66, &(0x7f00000003c0)=""/102})
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4900, 0x0) (async)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0xc004) (async)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x2, 0x37, 0x2}) (async)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xec, 0x4, 0x100, 0x1}) (async)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x7, 0x8, 0x1, 0x40, 0xd7, 0x63737ff9, 0x3, 0x800], 0x9, 0x800}) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000440)={0x1, 0x66, &(0x7f00000003c0)=""/102}) (async)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)

18:53:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x529200, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000740)={0x2, 0x9, {0x53, 0x98, 0x5, {0x7f, 0xa21}, {0x9, 0x4e}, @ramp={0x401, 0x7, {0x40, 0x3ff, 0x1, 0x5}}}, {0x53, 0x9, 0x7, {0x8, 0x5}, {0x4}, @rumble={0x4b, 0x151}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x3000000, 0x40, 0x20, 0x9ca, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4000000, 0x3, 0x3, 0x2, 0x3e], 0x5, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:30 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[ 1126.396592] input: syz1 as /devices/virtual/input/input12007
[ 1126.417382] input: syz1 as /devices/virtual/input/input12008
18:53:30 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1126.448548] input: syz1 as /devices/virtual/input/input12009
18:53:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4000000, 0x3, 0x3, 0x2, 0x3e], 0x5, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4000000, 0x3, 0x3, 0x2, 0x3e], 0x5, 0x800}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:31 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000080))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0xa0941)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000700)={r5, r6, 0x5, 0x9b, &(0x7f0000000100)="040fe50d9cb24d24bcef5ce169d7ecd9acd8ebe7667c1586ff9d118ea135cbc6d6f4ea0606b4834820cb86cfaff06f3189b5a687dff240940b4697d51e9aef3c9e8dc0a471690cd47db2cf1153bc26cb9347717770244fc65cc3ab2173829166563ee69c3e487ef60a68a740685962e8ead04e120983eb682caa4e924fc465aebd7eccaa2b944a294bfbdc709015cbab2255c22fe7c82c8421ce75", 0x6, 0x0, 0x800, 0x5, 0x2, 0x2, 0x5, 'syz1\x00'})
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000))

18:53:31 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x406c2, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x529200, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000740)={0x2, 0x9, {0x53, 0x98, 0x5, {0x7f, 0xa21}, {0x9, 0x4e}, @ramp={0x401, 0x7, {0x40, 0x3ff, 0x1, 0x5}}}, {0x53, 0x9, 0x7, {0x8, 0x5}, {0x4}, @rumble={0x4b, 0x151}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x3000000, 0x40, 0x20, 0x9ca, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x529200, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000740)={0x2, 0x9, {0x53, 0x98, 0x5, {0x7f, 0xa21}, {0x9, 0x4e}, @ramp={0x401, 0x7, {0x40, 0x3ff, 0x1, 0x5}}}, {0x53, 0x9, 0x7, {0x8, 0x5}, {0x4}, @rumble={0x4b, 0x151}}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x3000000, 0x40, 0x20, 0x9ca, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) (async)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

[ 1126.489302] input: syz1 as /devices/virtual/input/input12011
18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[ 1126.544892] input: syz1 as /devices/virtual/input/input12012
18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4000000, 0x3, 0x3, 0x2, 0x3e], 0x5, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x4000000, 0x3, 0x3, 0x2, 0x3e], 0x5, 0x800}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

[ 1126.589345] input: syz1 as /devices/virtual/input/input12013
18:53:31 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000080)) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0xa0941) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r4, 0x5502) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000700)={r5, r6, 0x5, 0x9b, &(0x7f0000000100)="040fe50d9cb24d24bcef5ce169d7ecd9acd8ebe7667c1586ff9d118ea135cbc6d6f4ea0606b4834820cb86cfaff06f3189b5a687dff240940b4697d51e9aef3c9e8dc0a471690cd47db2cf1153bc26cb9347717770244fc65cc3ab2173829166563ee69c3e487ef60a68a740685962e8ead04e120983eb682caa4e924fc465aebd7eccaa2b944a294bfbdc709015cbab2255c22fe7c82c8421ce75", 0x6, 0x0, 0x800, 0x5, 0x2, 0x2, 0x5, 'syz1\x00'}) (async)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000))

18:53:31 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x406c2, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x529200, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000740)={0x2, 0x9, {0x53, 0x98, 0x5, {0x7f, 0xa21}, {0x9, 0x4e}, @ramp={0x401, 0x7, {0x40, 0x3ff, 0x1, 0x5}}}, {0x53, 0x9, 0x7, {0x8, 0x5}, {0x4}, @rumble={0x4b, 0x151}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x3000000, 0x40, 0x20, 0x9ca, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x529200, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) (async)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000740)={0x2, 0x9, {0x53, 0x98, 0x5, {0x7f, 0xa21}, {0x9, 0x4e}, @ramp={0x401, 0x7, {0x40, 0x3ff, 0x1, 0x5}}}, {0x53, 0x9, 0x7, {0x8, 0x5}, {0x4}, @rumble={0x4b, 0x151}}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x3000000, 0x40, 0x20, 0x9ca, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) (async)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1126.630537] input: syz1 as /devices/virtual/input/input12015
[ 1126.650769] input: syz1 as /devices/virtual/input/input12016
18:53:31 executing program 5:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x200000000)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1126.740609] input: syz1 as /devices/virtual/input/input12017
[ 1126.768170] input: syz1 as /devices/virtual/input/input12019
18:53:31 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000080))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0xa0941)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000700)={r5, r6, 0x5, 0x9b, &(0x7f0000000100)="040fe50d9cb24d24bcef5ce169d7ecd9acd8ebe7667c1586ff9d118ea135cbc6d6f4ea0606b4834820cb86cfaff06f3189b5a687dff240940b4697d51e9aef3c9e8dc0a471690cd47db2cf1153bc26cb9347717770244fc65cc3ab2173829166563ee69c3e487ef60a68a740685962e8ead04e120983eb682caa4e924fc465aebd7eccaa2b944a294bfbdc709015cbab2255c22fe7c82c8421ce75", 0x6, 0x0, 0x800, 0x5, 0x2, 0x2, 0x5, 'syz1\x00'})
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000080)) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0xa0941) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
ioctl$UI_DEV_DESTROY(r4, 0x5502) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000700)={r5, r6, 0x5, 0x9b, &(0x7f0000000100)="040fe50d9cb24d24bcef5ce169d7ecd9acd8ebe7667c1586ff9d118ea135cbc6d6f4ea0606b4834820cb86cfaff06f3189b5a687dff240940b4697d51e9aef3c9e8dc0a471690cd47db2cf1153bc26cb9347717770244fc65cc3ab2173829166563ee69c3e487ef60a68a740685962e8ead04e120983eb682caa4e924fc465aebd7eccaa2b944a294bfbdc709015cbab2255c22fe7c82c8421ce75", 0x6, 0x0, 0x800, 0x5, 0x2, 0x2, 0x5, 'syz1\x00'}) (async)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) (async)

18:53:31 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x406c2, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

[ 1126.786332] input: syz1 as /devices/virtual/input/input12020
18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x24)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1126.828747] input: syz1 as /devices/virtual/input/input12021
18:53:31 executing program 5:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x200000000) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000))
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1126.881489] input: syz1 as /devices/virtual/input/input12022
18:53:31 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x24) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1126.950429] input: syz1 as /devices/virtual/input/input12025
[ 1126.968083] input: syz1 as /devices/virtual/input/input12026
18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r1, 0x5501)

18:53:31 executing program 5:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x200000000)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x24)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0) (async)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x24) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)

18:53:31 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async)

18:53:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

[ 1127.027358] input: syz1 as /devices/virtual/input/input12028
18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x8, 0x2, 0x7, 0x4000}, 'syz0\x00', 0x5})

18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1127.119523] input: syz1 as /devices/virtual/input/input12030
[ 1127.143575] input: syz1 as /devices/virtual/input/input12032
[ 1127.152082] input: syz1 as /devices/virtual/input/input12033
18:53:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x8, 0x2, 0x7, 0x4000}, 'syz0\x00', 0x5})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x8, 0x2, 0x7, 0x4000}, 'syz0\x00', 0x5}) (async)

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:31 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
ioctl$UI_DEV_DESTROY(r0, 0x5502) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))

[ 1127.186523] input: syz1 as /devices/virtual/input/input12034
18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x8, 0x2, 0x7, 0x4000}, 'syz0\x00', 0x5})

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (rerun: 32)

18:53:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x2, 0xfff})

[ 1127.286114] input: syz1 as /devices/virtual/input/input12037
[ 1127.316269] input: syz1 as /devices/virtual/input/input12040
[ 1127.326616] input: syz1 as /devices/virtual/input/input12041
18:53:31 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x89ca, 0x200000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"555a37ee61f8146b20317e170e4155eeb4e32cb942c7ff654accb312057a", 0x3, 0x30, 0x0, [0x4, 0x9, 0x6, 0x1, 0x6, 0x9, 0x916, 0x7, 0x6, 0x3, 0x0, 0x7, 0x200, 0x80000001, 0x2, 0x2, 0xfffffffa, 0x1]})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x9, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x8000, 0x6, 0x8, 0x401], 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000200)=0xffff)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r2, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1c, 0x18, "3be8bcf30e48d98a015d2255cf47b174462925fa57b09efa4e1f838f94038b012d848cc2c4e101506a949fe2c2fa4d5f7a83e83f7391ee4c0d6a95905492ce85", "093ad6311b14a6108d6ce555a1d581e0efa0fca9b6faaf09c7eab34c9c117d38c14a90166345417c6d10e771683a21c21bd82694fa7178ec8b7baaa16e549028", "1ae65a50b486960ee21f3561972b2c1dc799f509f12f1506c35be1a13e7b1c11", [0x81, 0x80000001]}})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:31 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:31 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x2, 0xfff})

18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x89ca, 0x200000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"555a37ee61f8146b20317e170e4155eeb4e32cb942c7ff654accb312057a", 0x3, 0x30, 0x0, [0x4, 0x9, 0x6, 0x1, 0x6, 0x9, 0x916, 0x7, 0x6, 0x3, 0x0, 0x7, 0x200, 0x80000001, 0x2, 0x2, 0xfffffffa, 0x1]})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x9, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (rerun: 32)

[ 1127.434497] input: syz1 as /devices/virtual/input/input12043
[ 1127.448431] input: syz1 as /devices/virtual/input/input12045
[ 1127.470118] input: syz1 as /devices/virtual/input/input12046
18:53:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x8000, 0x6, 0x8, 0x401], 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000200)=0xffff)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r2, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1c, 0x18, "3be8bcf30e48d98a015d2255cf47b174462925fa57b09efa4e1f838f94038b012d848cc2c4e101506a949fe2c2fa4d5f7a83e83f7391ee4c0d6a95905492ce85", "093ad6311b14a6108d6ce555a1d581e0efa0fca9b6faaf09c7eab34c9c117d38c14a90166345417c6d10e771683a21c21bd82694fa7178ec8b7baaa16e549028", "1ae65a50b486960ee21f3561972b2c1dc799f509f12f1506c35be1a13e7b1c11", [0x81, 0x80000001]}})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x8000, 0x6, 0x8, 0x401], 0x5}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000200)=0xffff) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r2, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1c, 0x18, "3be8bcf30e48d98a015d2255cf47b174462925fa57b09efa4e1f838f94038b012d848cc2c4e101506a949fe2c2fa4d5f7a83e83f7391ee4c0d6a95905492ce85", "093ad6311b14a6108d6ce555a1d581e0efa0fca9b6faaf09c7eab34c9c117d38c14a90166345417c6d10e771683a21c21bd82694fa7178ec8b7baaa16e549028", "1ae65a50b486960ee21f3561972b2c1dc799f509f12f1506c35be1a13e7b1c11", [0x81, 0x80000001]}}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:32 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x2, 0xfff})
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x2, 0xfff}) (async)

18:53:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0x8000, 0x6, 0x8, 0x401], 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000200)=0xffff) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r2, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1c, 0x18, "3be8bcf30e48d98a015d2255cf47b174462925fa57b09efa4e1f838f94038b012d848cc2c4e101506a949fe2c2fa4d5f7a83e83f7391ee4c0d6a95905492ce85", "093ad6311b14a6108d6ce555a1d581e0efa0fca9b6faaf09c7eab34c9c117d38c14a90166345417c6d10e771683a21c21bd82694fa7178ec8b7baaa16e549028", "1ae65a50b486960ee21f3561972b2c1dc799f509f12f1506c35be1a13e7b1c11", [0x81, 0x80000001]}}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {0x27, 0x9, 0x1, 0x4}, 0x56, [0x8, 0x8e3, 0x7, 0x48963434, 0x20, 0x8, 0x7, 0x29, 0x3, 0x10000, 0x9, 0x8, 0x101, 0x9, 0x372, 0xfffffc00, 0x1, 0x3f, 0x101, 0x6, 0x7f, 0x1, 0x3, 0x1, 0x9, 0x5, 0x7, 0x7, 0x7, 0x7, 0x6, 0x2, 0x66f1, 0x8, 0xfff, 0x7, 0x1000, 0x7, 0xff, 0x7621, 0xca2d, 0x2, 0x0, 0x3, 0x9, 0x6, 0x400, 0x100, 0x5, 0x9, 0x0, 0x246b, 0x8, 0x8, 0x7, 0x7, 0x1, 0x80000000, 0xb110, 0xffffffff, 0x3ff, 0x7fffffff, 0xb384, 0x8], [0x5, 0x1, 0x7ff, 0xfffffff9, 0x7f, 0x8000000, 0x16c4, 0xb74a, 0xffff8000, 0x54, 0x2, 0x5, 0x8, 0x227c, 0x9c, 0x400000, 0x7, 0x9, 0x1000, 0x30, 0x5, 0x0, 0xfffffff7, 0x6, 0x0, 0xcc5, 0xffffffff, 0x6, 0x1000, 0x400, 0x9, 0x40000, 0x9, 0x0, 0x7, 0x8b, 0xffffffff, 0x5, 0x8, 0xffff, 0xb42f, 0x9, 0x9, 0x6, 0x3f, 0x9, 0x80, 0x80000000, 0x5, 0x101, 0x101, 0x2, 0x7e, 0xc658, 0x9, 0x20, 0x9, 0x80, 0x0, 0xfffff9f1, 0x9, 0x64, 0x7, 0xffff], [0x5, 0x7, 0xaeb, 0x800, 0x7, 0x437, 0x1f, 0x0, 0x7fff, 0x6, 0x1f, 0x5, 0xe2f6, 0x17a8000, 0x7, 0x3, 0xdff, 0x9, 0x5, 0x3, 0x6, 0x20, 0x1, 0x4a41bd3d, 0x1, 0x7f, 0x1, 0x1, 0x3, 0x1000, 0x401, 0xa, 0x7fff, 0x1, 0x8, 0x20, 0xffff7406, 0x7f, 0x9, 0x4d9, 0x4, 0x1, 0x8, 0x6cc, 0x101, 0x9, 0x7, 0xff, 0x7, 0x7, 0x3, 0x40, 0xa44, 0x3d3a, 0x7800000, 0x0, 0x2, 0x6, 0xda27, 0x0, 0x8, 0x101, 0x6d, 0xab7], [0x1, 0x6, 0x1, 0xffffffc0, 0x2, 0x3f, 0x1, 0x9605, 0x2, 0x80, 0x0, 0x0, 0x40, 0x9, 0x1, 0x5, 0x80, 0x9, 0x81, 0xd9, 0x2d2, 0x3, 0x3, 0xfffffffa, 0x4, 0x0, 0x20bdf1e6, 0x80000001, 0x8, 0x3ff, 0x7, 0x7fff, 0xffffffc1, 0x4, 0x1000, 0x6, 0x2, 0x6, 0x0, 0x7fff, 0x37, 0x80000001, 0x3, 0x3ff, 0x3, 0xffffffff, 0x7, 0x4, 0x10000, 0x6, 0x100, 0x7937cdd6, 0x46, 0x4, 0x80000001, 0x73542f20, 0x7, 0x6, 0x7, 0x8000000, 0xd5b, 0x6, 0x64c, 0xc9]}, 0x45c)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x14, 0x4, 0x10001}, 0x18)

[ 1127.572804] input: syz1 as /devices/virtual/input/input12047
[ 1127.577344] input: syz1 as /devices/virtual/input/input12049
[ 1127.584432] input: syz1 as /devices/virtual/input/input12048
[ 1127.598234] input: syz1 as /devices/virtual/input/input12050
18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x89ca, 0x200000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"555a37ee61f8146b20317e170e4155eeb4e32cb942c7ff654accb312057a", 0x3, 0x30, 0x0, [0x4, 0x9, 0x6, 0x1, 0x6, 0x9, 0x916, 0x7, 0x6, 0x3, 0x0, 0x7, 0x200, 0x80000001, 0x2, 0x2, 0xfffffffa, 0x1]})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x9, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
syz_open_dev$rtc(&(0x7f0000000080), 0x89ca, 0x200000) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"555a37ee61f8146b20317e170e4155eeb4e32cb942c7ff654accb312057a", 0x3, 0x30, 0x0, [0x4, 0x9, 0x6, 0x1, 0x6, 0x9, 0x916, 0x7, 0x6, 0x3, 0x0, 0x7, 0x200, 0x80000001, 0x2, 0x2, 0xfffffffa, 0x1]}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x9, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x100], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x5, 0x0, 0x5, 0x8000}, 0x3d, [0xfffffff9, 0x5, 0x1, 0x2, 0x8000, 0x3f, 0x0, 0xfffffffa, 0x2000000, 0x0, 0x9c2, 0x2, 0x7fffffff, 0x3, 0x9ecc, 0x40, 0x1, 0xffff, 0x2495, 0x3, 0xfffffffc, 0x1, 0x481be9f7, 0x0, 0x7, 0xa1d2, 0x800, 0x8, 0x3, 0x3f, 0x5, 0x4, 0xa38, 0x571, 0x8, 0x0, 0x6, 0xe7f, 0xfffffffb, 0x8, 0x200, 0x0, 0xffff7fff, 0x3, 0xffffff00, 0x3, 0xffffff01, 0x4, 0x4, 0x3f, 0x0, 0xff800000, 0xffffff86, 0x6, 0x7, 0x5, 0x40, 0x8, 0x994, 0x101, 0x6, 0x2dbe, 0xffff, 0x5], [0x306, 0x1, 0xc6e0, 0x85, 0xff, 0x8, 0x4, 0x8, 0x78, 0x7f, 0x9c37, 0x3, 0x4, 0x5, 0x401, 0xa06a, 0x2, 0x84, 0x10001, 0x3, 0x10000, 0x64, 0x10001, 0x7, 0x7, 0x7, 0xe4, 0x81, 0x80000001, 0x1, 0xfff, 0x800, 0x1, 0xc0, 0x570, 0x1, 0xc38f, 0x8, 0x7, 0x80000001, 0x9, 0x5, 0x4, 0x7e56, 0x20, 0x6, 0x6, 0x0, 0x1, 0x1, 0xfc, 0x4, 0x7, 0x9, 0x1, 0x2, 0x9, 0x2, 0x4, 0x1f, 0x0, 0x3, 0x1, 0x1], [0x7, 0x5, 0x9604, 0x1, 0x3f, 0x7, 0x20, 0xc4f, 0x1, 0x9, 0x6, 0xffffffff, 0x0, 0x6, 0x1, 0xfffffffb, 0xda1a, 0x8, 0xff, 0x3f, 0xa6, 0x6, 0xfffff058, 0x4, 0x7, 0x1342b8c2, 0x7fff, 0x176, 0x5d, 0xfffffff7, 0x7, 0x2, 0x40, 0xffff, 0x2, 0x4, 0x4, 0xd6bf517d, 0x1, 0x3, 0x8000, 0x3, 0x9, 0xfffffc01, 0x5, 0x800, 0xfffffffc, 0x7, 0x46f, 0x5, 0xfff, 0x4, 0x7, 0xdde, 0x8000, 0x2, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x0, 0x7ff, 0x8], [0x0, 0x7, 0x9, 0x8, 0x7, 0xff1, 0x9, 0x0, 0x100, 0xef, 0x15, 0x7, 0xffff8cc8, 0xcd72, 0xd2e, 0x20, 0x80000001, 0xeca7, 0x0, 0x3, 0x9, 0xfffffff9, 0xff, 0xfca9, 0x2, 0x4, 0x50000000, 0x4, 0x2, 0x27c8010b, 0x3, 0x3c2, 0x80000000, 0xcec0, 0x7, 0x7ff, 0x7, 0x6dd, 0x100, 0x5, 0x7, 0x1, 0x200, 0x2, 0x80000001, 0x4, 0xfffffc01, 0x2, 0x1, 0x0, 0x8001, 0x7f, 0x6, 0x3, 0x2, 0x8, 0x0, 0x5, 0x3, 0x7ff, 0x7f, 0x5, 0x8, 0x7]}, 0x45c)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:32 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {0x27, 0x9, 0x1, 0x4}, 0x56, [0x8, 0x8e3, 0x7, 0x48963434, 0x20, 0x8, 0x7, 0x29, 0x3, 0x10000, 0x9, 0x8, 0x101, 0x9, 0x372, 0xfffffc00, 0x1, 0x3f, 0x101, 0x6, 0x7f, 0x1, 0x3, 0x1, 0x9, 0x5, 0x7, 0x7, 0x7, 0x7, 0x6, 0x2, 0x66f1, 0x8, 0xfff, 0x7, 0x1000, 0x7, 0xff, 0x7621, 0xca2d, 0x2, 0x0, 0x3, 0x9, 0x6, 0x400, 0x100, 0x5, 0x9, 0x0, 0x246b, 0x8, 0x8, 0x7, 0x7, 0x1, 0x80000000, 0xb110, 0xffffffff, 0x3ff, 0x7fffffff, 0xb384, 0x8], [0x5, 0x1, 0x7ff, 0xfffffff9, 0x7f, 0x8000000, 0x16c4, 0xb74a, 0xffff8000, 0x54, 0x2, 0x5, 0x8, 0x227c, 0x9c, 0x400000, 0x7, 0x9, 0x1000, 0x30, 0x5, 0x0, 0xfffffff7, 0x6, 0x0, 0xcc5, 0xffffffff, 0x6, 0x1000, 0x400, 0x9, 0x40000, 0x9, 0x0, 0x7, 0x8b, 0xffffffff, 0x5, 0x8, 0xffff, 0xb42f, 0x9, 0x9, 0x6, 0x3f, 0x9, 0x80, 0x80000000, 0x5, 0x101, 0x101, 0x2, 0x7e, 0xc658, 0x9, 0x20, 0x9, 0x80, 0x0, 0xfffff9f1, 0x9, 0x64, 0x7, 0xffff], [0x5, 0x7, 0xaeb, 0x800, 0x7, 0x437, 0x1f, 0x0, 0x7fff, 0x6, 0x1f, 0x5, 0xe2f6, 0x17a8000, 0x7, 0x3, 0xdff, 0x9, 0x5, 0x3, 0x6, 0x20, 0x1, 0x4a41bd3d, 0x1, 0x7f, 0x1, 0x1, 0x3, 0x1000, 0x401, 0xa, 0x7fff, 0x1, 0x8, 0x20, 0xffff7406, 0x7f, 0x9, 0x4d9, 0x4, 0x1, 0x8, 0x6cc, 0x101, 0x9, 0x7, 0xff, 0x7, 0x7, 0x3, 0x40, 0xa44, 0x3d3a, 0x7800000, 0x0, 0x2, 0x6, 0xda27, 0x0, 0x8, 0x101, 0x6d, 0xab7], [0x1, 0x6, 0x1, 0xffffffc0, 0x2, 0x3f, 0x1, 0x9605, 0x2, 0x80, 0x0, 0x0, 0x40, 0x9, 0x1, 0x5, 0x80, 0x9, 0x81, 0xd9, 0x2d2, 0x3, 0x3, 0xfffffffa, 0x4, 0x0, 0x20bdf1e6, 0x80000001, 0x8, 0x3ff, 0x7, 0x7fff, 0xffffffc1, 0x4, 0x1000, 0x6, 0x2, 0x6, 0x0, 0x7fff, 0x37, 0x80000001, 0x3, 0x3ff, 0x3, 0xffffffff, 0x7, 0x4, 0x10000, 0x6, 0x100, 0x7937cdd6, 0x46, 0x4, 0x80000001, 0x73542f20, 0x7, 0x6, 0x7, 0x8000000, 0xd5b, 0x6, 0x64c, 0xc9]}, 0x45c) (async)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x14, 0x4, 0x10001}, 0x18)

[ 1127.709378] input: syz1 as /devices/virtual/input/input12051
18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x8000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040))

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x100], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x5, 0x0, 0x5, 0x8000}, 0x3d, [0xfffffff9, 0x5, 0x1, 0x2, 0x8000, 0x3f, 0x0, 0xfffffffa, 0x2000000, 0x0, 0x9c2, 0x2, 0x7fffffff, 0x3, 0x9ecc, 0x40, 0x1, 0xffff, 0x2495, 0x3, 0xfffffffc, 0x1, 0x481be9f7, 0x0, 0x7, 0xa1d2, 0x800, 0x8, 0x3, 0x3f, 0x5, 0x4, 0xa38, 0x571, 0x8, 0x0, 0x6, 0xe7f, 0xfffffffb, 0x8, 0x200, 0x0, 0xffff7fff, 0x3, 0xffffff00, 0x3, 0xffffff01, 0x4, 0x4, 0x3f, 0x0, 0xff800000, 0xffffff86, 0x6, 0x7, 0x5, 0x40, 0x8, 0x994, 0x101, 0x6, 0x2dbe, 0xffff, 0x5], [0x306, 0x1, 0xc6e0, 0x85, 0xff, 0x8, 0x4, 0x8, 0x78, 0x7f, 0x9c37, 0x3, 0x4, 0x5, 0x401, 0xa06a, 0x2, 0x84, 0x10001, 0x3, 0x10000, 0x64, 0x10001, 0x7, 0x7, 0x7, 0xe4, 0x81, 0x80000001, 0x1, 0xfff, 0x800, 0x1, 0xc0, 0x570, 0x1, 0xc38f, 0x8, 0x7, 0x80000001, 0x9, 0x5, 0x4, 0x7e56, 0x20, 0x6, 0x6, 0x0, 0x1, 0x1, 0xfc, 0x4, 0x7, 0x9, 0x1, 0x2, 0x9, 0x2, 0x4, 0x1f, 0x0, 0x3, 0x1, 0x1], [0x7, 0x5, 0x9604, 0x1, 0x3f, 0x7, 0x20, 0xc4f, 0x1, 0x9, 0x6, 0xffffffff, 0x0, 0x6, 0x1, 0xfffffffb, 0xda1a, 0x8, 0xff, 0x3f, 0xa6, 0x6, 0xfffff058, 0x4, 0x7, 0x1342b8c2, 0x7fff, 0x176, 0x5d, 0xfffffff7, 0x7, 0x2, 0x40, 0xffff, 0x2, 0x4, 0x4, 0xd6bf517d, 0x1, 0x3, 0x8000, 0x3, 0x9, 0xfffffc01, 0x5, 0x800, 0xfffffffc, 0x7, 0x46f, 0x5, 0xfff, 0x4, 0x7, 0xdde, 0x8000, 0x2, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x0, 0x7ff, 0x8], [0x0, 0x7, 0x9, 0x8, 0x7, 0xff1, 0x9, 0x0, 0x100, 0xef, 0x15, 0x7, 0xffff8cc8, 0xcd72, 0xd2e, 0x20, 0x80000001, 0xeca7, 0x0, 0x3, 0x9, 0xfffffff9, 0xff, 0xfca9, 0x2, 0x4, 0x50000000, 0x4, 0x2, 0x27c8010b, 0x3, 0x3c2, 0x80000000, 0xcec0, 0x7, 0x7ff, 0x7, 0x6dd, 0x100, 0x5, 0x7, 0x1, 0x200, 0x2, 0x80000001, 0x4, 0xfffffc01, 0x2, 0x1, 0x0, 0x8001, 0x7f, 0x6, 0x3, 0x2, 0x8, 0x0, 0x5, 0x3, 0x7ff, 0x7f, 0x5, 0x8, 0x7]}, 0x45c)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1127.757873] input: syz1 as /devices/virtual/input/input12052
18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x200000, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:32 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async, rerun: 64)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {0x27, 0x9, 0x1, 0x4}, 0x56, [0x8, 0x8e3, 0x7, 0x48963434, 0x20, 0x8, 0x7, 0x29, 0x3, 0x10000, 0x9, 0x8, 0x101, 0x9, 0x372, 0xfffffc00, 0x1, 0x3f, 0x101, 0x6, 0x7f, 0x1, 0x3, 0x1, 0x9, 0x5, 0x7, 0x7, 0x7, 0x7, 0x6, 0x2, 0x66f1, 0x8, 0xfff, 0x7, 0x1000, 0x7, 0xff, 0x7621, 0xca2d, 0x2, 0x0, 0x3, 0x9, 0x6, 0x400, 0x100, 0x5, 0x9, 0x0, 0x246b, 0x8, 0x8, 0x7, 0x7, 0x1, 0x80000000, 0xb110, 0xffffffff, 0x3ff, 0x7fffffff, 0xb384, 0x8], [0x5, 0x1, 0x7ff, 0xfffffff9, 0x7f, 0x8000000, 0x16c4, 0xb74a, 0xffff8000, 0x54, 0x2, 0x5, 0x8, 0x227c, 0x9c, 0x400000, 0x7, 0x9, 0x1000, 0x30, 0x5, 0x0, 0xfffffff7, 0x6, 0x0, 0xcc5, 0xffffffff, 0x6, 0x1000, 0x400, 0x9, 0x40000, 0x9, 0x0, 0x7, 0x8b, 0xffffffff, 0x5, 0x8, 0xffff, 0xb42f, 0x9, 0x9, 0x6, 0x3f, 0x9, 0x80, 0x80000000, 0x5, 0x101, 0x101, 0x2, 0x7e, 0xc658, 0x9, 0x20, 0x9, 0x80, 0x0, 0xfffff9f1, 0x9, 0x64, 0x7, 0xffff], [0x5, 0x7, 0xaeb, 0x800, 0x7, 0x437, 0x1f, 0x0, 0x7fff, 0x6, 0x1f, 0x5, 0xe2f6, 0x17a8000, 0x7, 0x3, 0xdff, 0x9, 0x5, 0x3, 0x6, 0x20, 0x1, 0x4a41bd3d, 0x1, 0x7f, 0x1, 0x1, 0x3, 0x1000, 0x401, 0xa, 0x7fff, 0x1, 0x8, 0x20, 0xffff7406, 0x7f, 0x9, 0x4d9, 0x4, 0x1, 0x8, 0x6cc, 0x101, 0x9, 0x7, 0xff, 0x7, 0x7, 0x3, 0x40, 0xa44, 0x3d3a, 0x7800000, 0x0, 0x2, 0x6, 0xda27, 0x0, 0x8, 0x101, 0x6d, 0xab7], [0x1, 0x6, 0x1, 0xffffffc0, 0x2, 0x3f, 0x1, 0x9605, 0x2, 0x80, 0x0, 0x0, 0x40, 0x9, 0x1, 0x5, 0x80, 0x9, 0x81, 0xd9, 0x2d2, 0x3, 0x3, 0xfffffffa, 0x4, 0x0, 0x20bdf1e6, 0x80000001, 0x8, 0x3ff, 0x7, 0x7fff, 0xffffffc1, 0x4, 0x1000, 0x6, 0x2, 0x6, 0x0, 0x7fff, 0x37, 0x80000001, 0x3, 0x3ff, 0x3, 0xffffffff, 0x7, 0x4, 0x10000, 0x6, 0x100, 0x7937cdd6, 0x46, 0x4, 0x80000001, 0x73542f20, 0x7, 0x6, 0x7, 0x8000000, 0xd5b, 0x6, 0x64c, 0xc9]}, 0x45c) (async)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x14, 0x4, 0x10001}, 0x18)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x100], 0x1, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x5, 0x0, 0x5, 0x8000}, 0x3d, [0xfffffff9, 0x5, 0x1, 0x2, 0x8000, 0x3f, 0x0, 0xfffffffa, 0x2000000, 0x0, 0x9c2, 0x2, 0x7fffffff, 0x3, 0x9ecc, 0x40, 0x1, 0xffff, 0x2495, 0x3, 0xfffffffc, 0x1, 0x481be9f7, 0x0, 0x7, 0xa1d2, 0x800, 0x8, 0x3, 0x3f, 0x5, 0x4, 0xa38, 0x571, 0x8, 0x0, 0x6, 0xe7f, 0xfffffffb, 0x8, 0x200, 0x0, 0xffff7fff, 0x3, 0xffffff00, 0x3, 0xffffff01, 0x4, 0x4, 0x3f, 0x0, 0xff800000, 0xffffff86, 0x6, 0x7, 0x5, 0x40, 0x8, 0x994, 0x101, 0x6, 0x2dbe, 0xffff, 0x5], [0x306, 0x1, 0xc6e0, 0x85, 0xff, 0x8, 0x4, 0x8, 0x78, 0x7f, 0x9c37, 0x3, 0x4, 0x5, 0x401, 0xa06a, 0x2, 0x84, 0x10001, 0x3, 0x10000, 0x64, 0x10001, 0x7, 0x7, 0x7, 0xe4, 0x81, 0x80000001, 0x1, 0xfff, 0x800, 0x1, 0xc0, 0x570, 0x1, 0xc38f, 0x8, 0x7, 0x80000001, 0x9, 0x5, 0x4, 0x7e56, 0x20, 0x6, 0x6, 0x0, 0x1, 0x1, 0xfc, 0x4, 0x7, 0x9, 0x1, 0x2, 0x9, 0x2, 0x4, 0x1f, 0x0, 0x3, 0x1, 0x1], [0x7, 0x5, 0x9604, 0x1, 0x3f, 0x7, 0x20, 0xc4f, 0x1, 0x9, 0x6, 0xffffffff, 0x0, 0x6, 0x1, 0xfffffffb, 0xda1a, 0x8, 0xff, 0x3f, 0xa6, 0x6, 0xfffff058, 0x4, 0x7, 0x1342b8c2, 0x7fff, 0x176, 0x5d, 0xfffffff7, 0x7, 0x2, 0x40, 0xffff, 0x2, 0x4, 0x4, 0xd6bf517d, 0x1, 0x3, 0x8000, 0x3, 0x9, 0xfffffc01, 0x5, 0x800, 0xfffffffc, 0x7, 0x46f, 0x5, 0xfff, 0x4, 0x7, 0xdde, 0x8000, 0x2, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x0, 0x7ff, 0x8], [0x0, 0x7, 0x9, 0x8, 0x7, 0xff1, 0x9, 0x0, 0x100, 0xef, 0x15, 0x7, 0xffff8cc8, 0xcd72, 0xd2e, 0x20, 0x80000001, 0xeca7, 0x0, 0x3, 0x9, 0xfffffff9, 0xff, 0xfca9, 0x2, 0x4, 0x50000000, 0x4, 0x2, 0x27c8010b, 0x3, 0x3c2, 0x80000000, 0xcec0, 0x7, 0x7ff, 0x7, 0x6dd, 0x100, 0x5, 0x7, 0x1, 0x200, 0x2, 0x80000001, 0x4, 0xfffffc01, 0x2, 0x1, 0x0, 0x8001, 0x7f, 0x6, 0x3, 0x2, 0x8, 0x0, 0x5, 0x3, 0x7ff, 0x7f, 0x5, 0x8, 0x7]}, 0x45c)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x100], 0x1}) (async)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x5, 0x0, 0x5, 0x8000}, 0x3d, [0xfffffff9, 0x5, 0x1, 0x2, 0x8000, 0x3f, 0x0, 0xfffffffa, 0x2000000, 0x0, 0x9c2, 0x2, 0x7fffffff, 0x3, 0x9ecc, 0x40, 0x1, 0xffff, 0x2495, 0x3, 0xfffffffc, 0x1, 0x481be9f7, 0x0, 0x7, 0xa1d2, 0x800, 0x8, 0x3, 0x3f, 0x5, 0x4, 0xa38, 0x571, 0x8, 0x0, 0x6, 0xe7f, 0xfffffffb, 0x8, 0x200, 0x0, 0xffff7fff, 0x3, 0xffffff00, 0x3, 0xffffff01, 0x4, 0x4, 0x3f, 0x0, 0xff800000, 0xffffff86, 0x6, 0x7, 0x5, 0x40, 0x8, 0x994, 0x101, 0x6, 0x2dbe, 0xffff, 0x5], [0x306, 0x1, 0xc6e0, 0x85, 0xff, 0x8, 0x4, 0x8, 0x78, 0x7f, 0x9c37, 0x3, 0x4, 0x5, 0x401, 0xa06a, 0x2, 0x84, 0x10001, 0x3, 0x10000, 0x64, 0x10001, 0x7, 0x7, 0x7, 0xe4, 0x81, 0x80000001, 0x1, 0xfff, 0x800, 0x1, 0xc0, 0x570, 0x1, 0xc38f, 0x8, 0x7, 0x80000001, 0x9, 0x5, 0x4, 0x7e56, 0x20, 0x6, 0x6, 0x0, 0x1, 0x1, 0xfc, 0x4, 0x7, 0x9, 0x1, 0x2, 0x9, 0x2, 0x4, 0x1f, 0x0, 0x3, 0x1, 0x1], [0x7, 0x5, 0x9604, 0x1, 0x3f, 0x7, 0x20, 0xc4f, 0x1, 0x9, 0x6, 0xffffffff, 0x0, 0x6, 0x1, 0xfffffffb, 0xda1a, 0x8, 0xff, 0x3f, 0xa6, 0x6, 0xfffff058, 0x4, 0x7, 0x1342b8c2, 0x7fff, 0x176, 0x5d, 0xfffffff7, 0x7, 0x2, 0x40, 0xffff, 0x2, 0x4, 0x4, 0xd6bf517d, 0x1, 0x3, 0x8000, 0x3, 0x9, 0xfffffc01, 0x5, 0x800, 0xfffffffc, 0x7, 0x46f, 0x5, 0xfff, 0x4, 0x7, 0xdde, 0x8000, 0x2, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x0, 0x7ff, 0x8], [0x0, 0x7, 0x9, 0x8, 0x7, 0xff1, 0x9, 0x0, 0x100, 0xef, 0x15, 0x7, 0xffff8cc8, 0xcd72, 0xd2e, 0x20, 0x80000001, 0xeca7, 0x0, 0x3, 0x9, 0xfffffff9, 0xff, 0xfca9, 0x2, 0x4, 0x50000000, 0x4, 0x2, 0x27c8010b, 0x3, 0x3c2, 0x80000000, 0xcec0, 0x7, 0x7ff, 0x7, 0x6dd, 0x100, 0x5, 0x7, 0x1, 0x200, 0x2, 0x80000001, 0x4, 0xfffffc01, 0x2, 0x1, 0x0, 0x8001, 0x7f, 0x6, 0x3, 0x2, 0x8, 0x0, 0x5, 0x3, 0x7ff, 0x7f, 0x5, 0x8, 0x7]}, 0x45c) (async)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:32 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x8000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040))

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[ 1127.860195] input: syz1 as /devices/virtual/input/input12054
[ 1127.921738] input: syz1 as /devices/virtual/input/input12056
18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x200000, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x200000, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:32 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x14e)

18:53:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))
write$input_event(r0, &(0x7f00000003c0), 0x18)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x22)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f012cbd7000fbdbdf25060000000800010026252500050001000000000969"], 0x70}, 0x1, 0x0, 0x0, 0x820}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/uinput\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x40004)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1127.971769] input: syz1 as /devices/virtual/input/input12057
18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x200000, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x200000, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:32 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x8000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040))

[ 1128.021168] input: syz1 as /devices/virtual/input/input12060
[ 1128.087655] input: syz1 as /devices/virtual/input/input12061
[ 1128.127588] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'.
18:53:32 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async, rerun: 32)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x14e)

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))
write$input_event(r0, &(0x7f00000003c0), 0x18) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x22) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f012cbd7000fbdbdf25060000000800010026252500050001000000000969"], 0x70}, 0x1, 0x0, 0x0, 0x820}, 0x0) (async)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/uinput\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x40004)

18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x2007, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x7, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1128.138929] input: syz1 as /devices/virtual/input/input12065
[ 1128.152887] input: syz1 as /devices/virtual/input/input12066
18:53:32 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r1, 0xff, 0x92, &(0x7f0000000180)="edb935145ae3a25c82a767060fcc9c21c96c8f9adadf6805e38c8fba1c33e6e81cc12473afcc57e2591db63792eb6b9c8c694c3f8e120f5e4cc91d3484c8bc20f0c4c837eb99a60579a69f4215bb73ac2f5d2e479d2478f01b60ada91b5a18ee75439d32aebaac9cf1c510eece48cd6c89dfd8e3617d12ddbc6c17cad06092917e6727ae3720bf33423dc88e80f3c230cc89", 0x5, 0x47, 0xb4ef, 0x1, 0x4, 0x1, 0x1000, 'syz0\x00'})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/loop#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x48000)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))
write$input_event(r0, &(0x7f00000003c0), 0x18)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x22)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f012cbd7000fbdbdf25060000000800010026252500050001000000000969"], 0x70}, 0x1, 0x0, 0x0, 0x820}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/uinput\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x40004)

[ 1128.199217] input: syz1 as /devices/virtual/input/input12067
18:53:32 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x14e)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x14e) (async)

18:53:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) (async, rerun: 32)
write$input_event(r0, &(0x7f00000003c0), 0x18) (rerun: 32)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x22)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f012cbd7000fbdbdf25060000000800010026252500050001000000000969"], 0x70}, 0x1, 0x0, 0x0, 0x820}, 0x0) (async, rerun: 64)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/uinput\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x40004) (rerun: 64)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1128.278457] input: syz1 as /devices/virtual/input/input12070
[ 1128.289371] input: syz1 as /devices/virtual/input/input12071
18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x2007, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x7, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x2007, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x7, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:32 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r1, 0xff, 0x92, &(0x7f0000000180)="edb935145ae3a25c82a767060fcc9c21c96c8f9adadf6805e38c8fba1c33e6e81cc12473afcc57e2591db63792eb6b9c8c694c3f8e120f5e4cc91d3484c8bc20f0c4c837eb99a60579a69f4215bb73ac2f5d2e479d2478f01b60ada91b5a18ee75439d32aebaac9cf1c510eece48cd6c89dfd8e3617d12ddbc6c17cad06092917e6727ae3720bf33423dc88e80f3c230cc89", 0x5, 0x47, 0xb4ef, 0x1, 0x4, 0x1, 0x1000, 'syz0\x00'}) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/loop#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x48000)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[ 1128.323165] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1128.375045] input: syz1 as /devices/virtual/input/input12074
[ 1128.412037] input: syz1 as /devices/virtual/input/input12075
18:53:32 executing program 5:
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf250400000008000c0002000000100001002f6465762f75696e7075740006000b002800000008000c000100000006000b0015000000140005000000000000000000000000000000000108000700ffffffff0c0001003239bd6c9bac121f"], 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)

18:53:32 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x89ca, 0x200000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"555a37ee61f8146b20317e170e4155eeb4e32cb942c7ff654accb312057a", 0x3, 0x30, 0x0, [0x4, 0x9, 0x6, 0x1, 0x6, 0x9, 0x916, 0x7, 0x6, 0x3, 0x0, 0x7, 0x200, 0x80000001, 0x2, 0x2, 0xfffffffa, 0x1]})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x9, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:32 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x34, 0x200000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x1, 0xf1], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r1})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

18:53:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:32 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x2007, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x7, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (rerun: 32)

[ 1128.429475] input: syz1 as /devices/virtual/input/input12078
18:53:32 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r1, 0xff, 0x92, &(0x7f0000000180)="edb935145ae3a25c82a767060fcc9c21c96c8f9adadf6805e38c8fba1c33e6e81cc12473afcc57e2591db63792eb6b9c8c694c3f8e120f5e4cc91d3484c8bc20f0c4c837eb99a60579a69f4215bb73ac2f5d2e479d2478f01b60ada91b5a18ee75439d32aebaac9cf1c510eece48cd6c89dfd8e3617d12ddbc6c17cad06092917e6727ae3720bf33423dc88e80f3c230cc89", 0x5, 0x47, 0xb4ef, 0x1, 0x4, 0x1, 0x1000, 'syz0\x00'}) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/loop#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x48000) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)

[ 1128.527030] input: syz1 as /devices/virtual/input/input12080
[ 1128.539906] input: syz1 as /devices/virtual/input/input12082
[ 1128.552056] input: syz1 as /devices/virtual/input/input12081
18:53:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x401, 0x0, 0x80, 0x1, 0x6, 0x2], &(0x7f0000000240)=[0x0, 0x0], 0x6, 0x6e8, 0xe0e0e0e0})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000000c0))
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x5, 0x4, 0x9, 0x8, "b70e9e2e49bf1bd87226d8aef6edb258c23922e2d292cf953eb070203e922618f0495fbacdd69efdeeba5abeb92905c8559313d67aaa17a7eb759ed178c71389", "74a2b10a5bede38fd9fe4ef4caa5282f20da45f8ee409868e64ffe15b3821ae0", [0x7fffffff]})

18:53:33 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x2, 0xfff})

18:53:33 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x34, 0x200000) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x1, 0xf1], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r1})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

18:53:33 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1128.574104] input: syz1 as /devices/virtual/input/input12083
18:53:33 executing program 5:
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf250400000008000c0002000000100001002f6465762f75696e7075740006000b002800000008000c000100000006000b0015000000140005000000000000000000000000000000000108000700ffffffff0c0001003239bd6c9bac121f"], 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf250400000008000c0002000000100001002f6465762f75696e7075740006000b002800000008000c000100000006000b0015000000140005000000000000000000000000000000000108000700ffffffff0c0001003239bd6c9bac121f"], 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)

18:53:33 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x401, 0x0, 0x80, 0x1, 0x6, 0x2], &(0x7f0000000240)=[0x0, 0x0], 0x6, 0x6e8, 0xe0e0e0e0})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000000c0))
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x5, 0x4, 0x9, 0x8, "b70e9e2e49bf1bd87226d8aef6edb258c23922e2d292cf953eb070203e922618f0495fbacdd69efdeeba5abeb92905c8559313d67aaa17a7eb759ed178c71389", "74a2b10a5bede38fd9fe4ef4caa5282f20da45f8ee409868e64ffe15b3821ae0", [0x7fffffff]})

18:53:33 executing program 5:
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf250400000008000c0002000000100001002f6465762f75696e7075740006000b002800000008000c000100000006000b0015000000140005000000000000000000000000000000000108000700ffffffff0c0001003239bd6c9bac121f"], 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)

18:53:33 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1128.652830] input: syz1 as /devices/virtual/input/input12084
18:53:33 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:33 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:33 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x34, 0x200000) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x1, 0xf1], 0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r1}) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

[ 1128.699986] input: syz1 as /devices/virtual/input/input12085
18:53:33 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6c8, 0x6], 0x2, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6)

18:53:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x401, 0x0, 0x80, 0x1, 0x6, 0x2], &(0x7f0000000240)=[0x0, 0x0], 0x6, 0x6e8, 0xe0e0e0e0})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000000c0)) (async, rerun: 32)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x5, 0x4, 0x9, 0x8, "b70e9e2e49bf1bd87226d8aef6edb258c23922e2d292cf953eb070203e922618f0495fbacdd69efdeeba5abeb92905c8559313d67aaa17a7eb759ed178c71389", "74a2b10a5bede38fd9fe4ef4caa5282f20da45f8ee409868e64ffe15b3821ae0", [0x7fffffff]}) (rerun: 32)

18:53:33 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1128.777320] input: syz1 as /devices/virtual/input/input12087
[ 1128.792173] input: syz1 as /devices/virtual/input/input12088
18:53:33 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:33 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6c8, 0x6], 0x2, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6c8, 0x6], 0x2, 0x80800}) (async)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6) (async)

18:53:33 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x1c)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1128.839818] input: syz1 as /devices/virtual/input/input12090
18:53:33 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:33 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:33 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x75c7, 0x488, 0x4}, 'syz0\x00', 0x45})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0x4, 0x4, 0xfffff6d6})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:33 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x1c) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1128.915612] input: syz1 as /devices/virtual/input/input12092
[ 1128.941028] input: syz1 as /devices/virtual/input/input12093
18:53:33 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6c8, 0x6], 0x2, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6c8, 0x6], 0x2, 0x80800}) (async)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6) (async)

18:53:33 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:33 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x75c7, 0x488, 0x4}, 'syz0\x00', 0x45}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0x4, 0x4, 0xfffff6d6})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1128.990114] input: syz1 as /devices/virtual/input/input12095
[ 1128.995831] input: syz1 as /devices/virtual/input/input12096
[ 1129.077806] input: syz1 as /devices/virtual/input/input12100
18:53:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x20000000000008, 0x10002)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x6dd2, 0x5, 0x3, 0xfffffff8, 0x40, 0x8001], 0x7, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x0, 0x8, "3f3d90ee45247dc36002672840dca14883e800c2450568d288d4933262b0a525dec2a77987eadfaa2ab783e27bfc2257972438f1c1009db2af3415a38640ad55", "60f26af2a6f94acf11b2d286fbb23c30f9c41f1f480b303fe55f761a1363fe44", [0x4, 0xffffffffffffffff]})
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x529200, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000740)={0x2, 0x9, {0x53, 0x98, 0x5, {0x7f, 0xa21}, {0x9, 0x4e}, @ramp={0x401, 0x7, {0x40, 0x3ff, 0x1, 0x5}}}, {0x53, 0x9, 0x7, {0x8, 0x5}, {0x4}, @rumble={0x4b, 0x151}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x3000000, 0x40, 0x20, 0x9ca, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180))
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x1c)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000000))
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x75c7, 0x488, 0x4}, 'syz0\x00', 0x45})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0x4, 0x4, 0xfffff6d6})
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x75c7, 0x488, 0x4}, 'syz0\x00', 0x45}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0x4, 0x4, 0xfffff6d6}) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000000)) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [], [], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1129.772734] input: syz1 as /devices/virtual/input/input12103
18:53:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000000)) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000000))
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x20000000000008, 0x10002)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x6dd2, 0x5, 0x3, 0xfffffff8, 0x40, 0x8001], 0x7, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x0, 0x8, "3f3d90ee45247dc36002672840dca14883e800c2450568d288d4933262b0a525dec2a77987eadfaa2ab783e27bfc2257972438f1c1009db2af3415a38640ad55", "60f26af2a6f94acf11b2d286fbb23c30f9c41f1f480b303fe55f761a1363fe44", [0x4, 0xffffffffffffffff]}) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:34 executing program 5:
r0 = semget$private(0x0, 0x3, 0x160)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000))
semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/254)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)

[ 1129.820737] input: syz1 as /devices/virtual/input/input12105
18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40e356c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x1b8, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1129.871103] input: syz1 as /devices/virtual/input/input12109
[ 1129.882679] input: syz1 as /devices/virtual/input/input12110
18:53:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x20000000000008, 0x10002)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x6dd2, 0x5, 0x3, 0xfffffff8, 0x40, 0x8001], 0x7, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x0, 0x8, "3f3d90ee45247dc36002672840dca14883e800c2450568d288d4933262b0a525dec2a77987eadfaa2ab783e27bfc2257972438f1c1009db2af3415a38640ad55", "60f26af2a6f94acf11b2d286fbb23c30f9c41f1f480b303fe55f761a1363fe44", [0x4, 0xffffffffffffffff]})
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
syz_open_dev$loop(&(0x7f00000007c0), 0x20000000000008, 0x10002) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x20, 0x6dd2, 0x5, 0x3, 0xfffffff8, 0x40, 0x8001], 0x7}) (async)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x0, 0x8, "3f3d90ee45247dc36002672840dca14883e800c2450568d288d4933262b0a525dec2a77987eadfaa2ab783e27bfc2257972438f1c1009db2af3415a38640ad55", "60f26af2a6f94acf11b2d286fbb23c30f9c41f1f480b303fe55f761a1363fe44", [0x4, 0xffffffffffffffff]}) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)

18:53:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [], [], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:34 executing program 5:
r0 = semget$private(0x0, 0x3, 0x160)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000))
semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/254) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)

18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40e356c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x1b8, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40e356c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x1b8, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

[ 1129.940618] input: syz1 as /devices/virtual/input/input12112
[ 1129.964026] input: syz1 as /devices/virtual/input/input12113
[ 1129.970560] input: syz1 as /devices/virtual/input/input12114
[ 1129.982491] input: syz1 as /devices/virtual/input/input12115
18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40e356c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x1b8, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:34 executing program 5:
r0 = semget$private(0x0, 0x3, 0x160)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000))
semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/254)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
semget$private(0x0, 0x3, 0x160) (async)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) (async)
semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/254) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)

18:53:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [], [], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1130.011543] input: syz1 as /devices/virtual/input/input12116
18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40e356c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x1b8, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40e356c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x1b8, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

[ 1130.061161] input: syz1 as /devices/virtual/input/input12117
[ 1130.070619] input: syz1 as /devices/virtual/input/input12118
18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [], [], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:34 executing program 5:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:34 executing program 5:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:34 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x40, 0x5, 0x2, 0x3f}, 'syz1\x00', 0x6})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1130.124935] input: syz1 as /devices/virtual/input/input12119
[ 1130.141122] input: syz1 as /devices/virtual/input/input12120
18:53:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))

18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[ 1130.184531] input: syz1 as /devices/virtual/input/input12122
18:53:34 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

18:53:34 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) (async, rerun: 32)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async, rerun: 64)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x40, 0x5, 0x2, 0x3f}, 'syz1\x00', 0x6}) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (rerun: 32)

18:53:34 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000100))

18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1130.237861] input: syz1 as /devices/virtual/input/input12123
[ 1130.245241] input: syz1 as /devices/virtual/input/input12124
18:53:34 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:34 executing program 5:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:34 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:34 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async, rerun: 32)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) (async, rerun: 64)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (rerun: 64)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000100))

[ 1130.321510] input: syz1 as /devices/virtual/input/input12127
[ 1130.337962] input: syz1 as /devices/virtual/input/input12129
[ 1130.347479] input: syz1 as /devices/virtual/input/input12130
18:53:34 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r2, 0x5501)

18:53:34 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x40, 0x5, 0x2, 0x3f}, 'syz1\x00', 0x6}) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:34 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x9, 0x6})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0xb1, 0x0, 0xfff7, 0x80}, 0x10, [0x8, 0x8c, 0x100, 0x2, 0xc4, 0xfff, 0x8, 0x7f, 0x1f, 0x3131bfdb, 0xc1, 0x400000, 0x1000, 0x7, 0x1, 0x7, 0x7f, 0xa06, 0x2, 0xa7, 0x8001, 0x7fffffff, 0x4, 0x1, 0x3, 0x66, 0x34, 0x59b2, 0x0, 0x12f, 0x0, 0x8, 0x8, 0x20, 0x2, 0x0, 0xfffff587, 0x3, 0x3ff, 0x3, 0x401, 0x0, 0x7, 0xfff, 0x0, 0x4, 0x1, 0xa0ab, 0x1, 0x5, 0x4, 0xff, 0xaf, 0xffff0001, 0x3, 0x10000, 0x1, 0x2, 0x256b, 0x79b, 0x82f, 0x101, 0x7, 0x5d22], [0xffffffff, 0x7, 0x6, 0x80, 0x3, 0xfffffffd, 0x1ff, 0x8, 0x3, 0x6, 0x4, 0x100, 0x9a, 0xe2, 0x0, 0x569, 0x0, 0x7, 0x2, 0x1f, 0x6, 0x8, 0x2, 0x2f55a591, 0xfc000000, 0x3ff, 0x3, 0x9, 0x2, 0x0, 0x3, 0x0, 0x2, 0xfffffffb, 0x9, 0x1, 0x4, 0x1, 0x4a, 0x0, 0xb2, 0x40, 0x8, 0x1, 0x2, 0xd68c, 0x5, 0x9, 0x80000001, 0x80, 0x1, 0x1000, 0x1f, 0x0, 0x4, 0x400000, 0x9, 0x6, 0x6, 0x1, 0x80000000, 0x3ff, 0x2, 0xfffffffc], [0x6, 0x1, 0x9, 0x9, 0x100, 0x8000, 0xffffffff, 0x4, 0x101, 0x2, 0xfffff00d, 0x5, 0x401, 0x32a, 0xc337, 0x1, 0x7f, 0x624, 0x7, 0x1b462d2f, 0xffff, 0x0, 0x792, 0xd95b, 0x8, 0x4, 0x101, 0x2, 0x9, 0x2, 0x8, 0xa881, 0xce2, 0x0, 0x170, 0x6, 0x1, 0x80000000, 0x8, 0x8, 0x3, 0x8, 0x7, 0x7f, 0x7f, 0x0, 0x20, 0x8, 0xe2f, 0xfffffc00, 0x1, 0x20, 0x7ff, 0x9, 0x3ff, 0x1, 0x80, 0x7, 0xd1f, 0x5, 0x80000000, 0x1f6, 0x3, 0x91], [0x7, 0x0, 0x8001, 0xffffff61, 0x2, 0x7, 0x3, 0x6, 0x9, 0x1b17, 0x4, 0xa1b, 0x2, 0x5, 0x10000, 0x3ff, 0xfffff000, 0x53da, 0x4, 0x8001, 0x1, 0x7, 0x1ff, 0x8000, 0x80, 0x1ff, 0x20, 0xff, 0x3f, 0x4a, 0x6, 0x9, 0x3, 0x5, 0x4, 0x411, 0x6, 0x7fff, 0xf0ed, 0xffff, 0x8, 0xee, 0x49ce, 0x7fff, 0x7ff, 0x7, 0x2, 0x800, 0x545, 0x0, 0x5, 0x5, 0x4, 0x3ff, 0x1, 0x0, 0x8, 0x0, 0x9, 0x6, 0x1, 0x8, 0xf6d4]}, 0x45c)

[ 1130.395958] input: syz1 as /devices/virtual/input/input12131
[ 1130.433199] input: syz1 as /devices/virtual/input/input12132
18:53:34 executing program 0:
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x14, ""/20})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x35cc, 0x1, 0x9b8], 0x3, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000080)=0x9)
syz_open_dev$loop(&(0x7f0000000100), 0x45d5, 0x264100)

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x9, 0x6}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0xb1, 0x0, 0xfff7, 0x80}, 0x10, [0x8, 0x8c, 0x100, 0x2, 0xc4, 0xfff, 0x8, 0x7f, 0x1f, 0x3131bfdb, 0xc1, 0x400000, 0x1000, 0x7, 0x1, 0x7, 0x7f, 0xa06, 0x2, 0xa7, 0x8001, 0x7fffffff, 0x4, 0x1, 0x3, 0x66, 0x34, 0x59b2, 0x0, 0x12f, 0x0, 0x8, 0x8, 0x20, 0x2, 0x0, 0xfffff587, 0x3, 0x3ff, 0x3, 0x401, 0x0, 0x7, 0xfff, 0x0, 0x4, 0x1, 0xa0ab, 0x1, 0x5, 0x4, 0xff, 0xaf, 0xffff0001, 0x3, 0x10000, 0x1, 0x2, 0x256b, 0x79b, 0x82f, 0x101, 0x7, 0x5d22], [0xffffffff, 0x7, 0x6, 0x80, 0x3, 0xfffffffd, 0x1ff, 0x8, 0x3, 0x6, 0x4, 0x100, 0x9a, 0xe2, 0x0, 0x569, 0x0, 0x7, 0x2, 0x1f, 0x6, 0x8, 0x2, 0x2f55a591, 0xfc000000, 0x3ff, 0x3, 0x9, 0x2, 0x0, 0x3, 0x0, 0x2, 0xfffffffb, 0x9, 0x1, 0x4, 0x1, 0x4a, 0x0, 0xb2, 0x40, 0x8, 0x1, 0x2, 0xd68c, 0x5, 0x9, 0x80000001, 0x80, 0x1, 0x1000, 0x1f, 0x0, 0x4, 0x400000, 0x9, 0x6, 0x6, 0x1, 0x80000000, 0x3ff, 0x2, 0xfffffffc], [0x6, 0x1, 0x9, 0x9, 0x100, 0x8000, 0xffffffff, 0x4, 0x101, 0x2, 0xfffff00d, 0x5, 0x401, 0x32a, 0xc337, 0x1, 0x7f, 0x624, 0x7, 0x1b462d2f, 0xffff, 0x0, 0x792, 0xd95b, 0x8, 0x4, 0x101, 0x2, 0x9, 0x2, 0x8, 0xa881, 0xce2, 0x0, 0x170, 0x6, 0x1, 0x80000000, 0x8, 0x8, 0x3, 0x8, 0x7, 0x7f, 0x7f, 0x0, 0x20, 0x8, 0xe2f, 0xfffffc00, 0x1, 0x20, 0x7ff, 0x9, 0x3ff, 0x1, 0x80, 0x7, 0xd1f, 0x5, 0x80000000, 0x1f6, 0x3, 0x91], [0x7, 0x0, 0x8001, 0xffffff61, 0x2, 0x7, 0x3, 0x6, 0x9, 0x1b17, 0x4, 0xa1b, 0x2, 0x5, 0x10000, 0x3ff, 0xfffff000, 0x53da, 0x4, 0x8001, 0x1, 0x7, 0x1ff, 0x8000, 0x80, 0x1ff, 0x20, 0xff, 0x3f, 0x4a, 0x6, 0x9, 0x3, 0x5, 0x4, 0x411, 0x6, 0x7fff, 0xf0ed, 0xffff, 0x8, 0xee, 0x49ce, 0x7fff, 0x7ff, 0x7, 0x2, 0x800, 0x545, 0x0, 0x5, 0x5, 0x4, 0x3ff, 0x1, 0x0, 0x8, 0x0, 0x9, 0x6, 0x1, 0x8, 0xf6d4]}, 0x45c)

[ 1130.456589] input: syz1 as /devices/virtual/input/input12133
18:53:35 executing program 4:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x19)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:35 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:35 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) (async, rerun: 64)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async, rerun: 64)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000100))

18:53:35 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x9, 0x6}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0xb1, 0x0, 0xfff7, 0x80}, 0x10, [0x8, 0x8c, 0x100, 0x2, 0xc4, 0xfff, 0x8, 0x7f, 0x1f, 0x3131bfdb, 0xc1, 0x400000, 0x1000, 0x7, 0x1, 0x7, 0x7f, 0xa06, 0x2, 0xa7, 0x8001, 0x7fffffff, 0x4, 0x1, 0x3, 0x66, 0x34, 0x59b2, 0x0, 0x12f, 0x0, 0x8, 0x8, 0x20, 0x2, 0x0, 0xfffff587, 0x3, 0x3ff, 0x3, 0x401, 0x0, 0x7, 0xfff, 0x0, 0x4, 0x1, 0xa0ab, 0x1, 0x5, 0x4, 0xff, 0xaf, 0xffff0001, 0x3, 0x10000, 0x1, 0x2, 0x256b, 0x79b, 0x82f, 0x101, 0x7, 0x5d22], [0xffffffff, 0x7, 0x6, 0x80, 0x3, 0xfffffffd, 0x1ff, 0x8, 0x3, 0x6, 0x4, 0x100, 0x9a, 0xe2, 0x0, 0x569, 0x0, 0x7, 0x2, 0x1f, 0x6, 0x8, 0x2, 0x2f55a591, 0xfc000000, 0x3ff, 0x3, 0x9, 0x2, 0x0, 0x3, 0x0, 0x2, 0xfffffffb, 0x9, 0x1, 0x4, 0x1, 0x4a, 0x0, 0xb2, 0x40, 0x8, 0x1, 0x2, 0xd68c, 0x5, 0x9, 0x80000001, 0x80, 0x1, 0x1000, 0x1f, 0x0, 0x4, 0x400000, 0x9, 0x6, 0x6, 0x1, 0x80000000, 0x3ff, 0x2, 0xfffffffc], [0x6, 0x1, 0x9, 0x9, 0x100, 0x8000, 0xffffffff, 0x4, 0x101, 0x2, 0xfffff00d, 0x5, 0x401, 0x32a, 0xc337, 0x1, 0x7f, 0x624, 0x7, 0x1b462d2f, 0xffff, 0x0, 0x792, 0xd95b, 0x8, 0x4, 0x101, 0x2, 0x9, 0x2, 0x8, 0xa881, 0xce2, 0x0, 0x170, 0x6, 0x1, 0x80000000, 0x8, 0x8, 0x3, 0x8, 0x7, 0x7f, 0x7f, 0x0, 0x20, 0x8, 0xe2f, 0xfffffc00, 0x1, 0x20, 0x7ff, 0x9, 0x3ff, 0x1, 0x80, 0x7, 0xd1f, 0x5, 0x80000000, 0x1f6, 0x3, 0x91], [0x7, 0x0, 0x8001, 0xffffff61, 0x2, 0x7, 0x3, 0x6, 0x9, 0x1b17, 0x4, 0xa1b, 0x2, 0x5, 0x10000, 0x3ff, 0xfffff000, 0x53da, 0x4, 0x8001, 0x1, 0x7, 0x1ff, 0x8000, 0x80, 0x1ff, 0x20, 0xff, 0x3f, 0x4a, 0x6, 0x9, 0x3, 0x5, 0x4, 0x411, 0x6, 0x7fff, 0xf0ed, 0xffff, 0x8, 0xee, 0x49ce, 0x7fff, 0x7ff, 0x7, 0x2, 0x800, 0x545, 0x0, 0x5, 0x5, 0x4, 0x3ff, 0x1, 0x0, 0x8, 0x0, 0x9, 0x6, 0x1, 0x8, 0xf6d4]}, 0x45c)

18:53:35 executing program 0:
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0xffffffffffffb5ae})
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x4, 0x7, 0x8, 0x83], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x90d, 0x9, 0xfffffffb, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x48)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000740)=""/120)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x19)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000008c0)=""/159)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$UI_DEV_CREATE(r2, 0x5501)

[ 1130.501144] input: syz1 as /devices/virtual/input/input12136
[ 1130.514336] input: syz1 as /devices/virtual/input/input12135
[ 1130.535221] input: syz1 as /devices/virtual/input/input12137
18:53:35 executing program 4:
r0 = semget$private(0x0, 0x2, 0x2)
semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000003100)=""/4096)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/64)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43e2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x3f, 0x6}, 0x3d, [0x7f, 0x33, 0x1, 0x9, 0x1, 0x1, 0x3, 0x8de, 0x6, 0x7fff, 0x9, 0x1, 0xfffffff8, 0x9c57, 0x5, 0x6, 0x437b, 0x0, 0xf6c6, 0x7, 0xffff, 0x9, 0x30f, 0x10001, 0x5, 0xca7, 0x80, 0x7, 0x0, 0x3f, 0x3, 0x2a7, 0x6, 0x400, 0x3, 0x101, 0x400, 0x86, 0x9, 0x1000, 0xe1a, 0x3, 0x100, 0x1, 0x3, 0xf4, 0xcfe, 0x3a0, 0xfaea, 0x1, 0x401, 0x2, 0x7, 0x5, 0x9, 0x9d, 0x10000, 0x3, 0x4d23, 0x9, 0x10000, 0x200, 0x1], [0x1, 0xb8e, 0x101, 0xeb7, 0xb28, 0x40, 0x3, 0x1ff, 0x7be, 0x5, 0x3, 0x5, 0x868, 0x4, 0x80000000, 0xd8, 0x8, 0x400, 0x1, 0x2, 0x0, 0x1, 0x401, 0x2cab5411, 0xffffffff, 0x2, 0x1f, 0x2, 0x7fff, 0x4, 0x2618, 0x7, 0x3ff, 0x800, 0x1ff, 0xd7cc, 0xa7b, 0xffffffc0, 0x7, 0x4, 0x719, 0x8, 0x6, 0x3, 0x9cd5, 0xfffffffb, 0x200, 0x7ff, 0x9, 0x3, 0x3, 0x81, 0x200, 0x4, 0x3ff, 0x1, 0x1, 0x10000, 0x5c6, 0x10000, 0x1, 0xae, 0xdf1, 0xfffffff9], [0x7fff, 0x2, 0x8001, 0x0, 0xb9, 0x8, 0xffffffe1, 0x5d, 0xffff7fff, 0xb9, 0x19, 0x7, 0x8223, 0x8, 0xfffffff9, 0x0, 0x7, 0x3, 0x8, 0x80, 0x8, 0x401, 0x6, 0x5, 0x1, 0x9, 0x2, 0x0, 0x7d0, 0x2, 0x8, 0xa89, 0x7fff, 0xfff, 0x8001, 0x401, 0x9470, 0x0, 0x5, 0x7, 0x6, 0x4, 0x7, 0x2, 0x5, 0x0, 0xffffffff, 0xabd, 0x2, 0x3, 0x5, 0xb46, 0x3, 0x8000, 0x2, 0xd2, 0x6, 0x3b, 0x7fff, 0x8bd7, 0x0, 0x70, 0x7ff, 0xa7], [0x7f, 0x2, 0xf1e2, 0x7, 0x180000, 0x745b, 0x9, 0x6, 0x2, 0x6c3, 0x8, 0x0, 0x6, 0x3, 0x6d4cdcce, 0x8000, 0xa90d, 0x7ff, 0xe0000000, 0x8, 0x6f2, 0x9, 0x0, 0x3, 0x81, 0x800, 0x1, 0x8, 0x10000, 0x100, 0x20, 0x7, 0x7fffffff, 0xb5, 0x9, 0xb44, 0x48, 0x5, 0x0, 0x800, 0x81, 0x8000, 0x133f, 0x10, 0x841d, 0xffffff80, 0x5, 0x8, 0x6, 0xef, 0x4, 0x8, 0x80000001, 0xfff, 0x8000, 0x9, 0x80000000, 0x200, 0x0, 0x9, 0x6, 0x3, 0xffffff00, 0x7]}, 0x45c)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))

18:53:35 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1130.591464] input: syz1 as /devices/virtual/input/input12139
18:53:35 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x3f, 0x6}, 0x3d, [0x7f, 0x33, 0x1, 0x9, 0x1, 0x1, 0x3, 0x8de, 0x6, 0x7fff, 0x9, 0x1, 0xfffffff8, 0x9c57, 0x5, 0x6, 0x437b, 0x0, 0xf6c6, 0x7, 0xffff, 0x9, 0x30f, 0x10001, 0x5, 0xca7, 0x80, 0x7, 0x0, 0x3f, 0x3, 0x2a7, 0x6, 0x400, 0x3, 0x101, 0x400, 0x86, 0x9, 0x1000, 0xe1a, 0x3, 0x100, 0x1, 0x3, 0xf4, 0xcfe, 0x3a0, 0xfaea, 0x1, 0x401, 0x2, 0x7, 0x5, 0x9, 0x9d, 0x10000, 0x3, 0x4d23, 0x9, 0x10000, 0x200, 0x1], [0x1, 0xb8e, 0x101, 0xeb7, 0xb28, 0x40, 0x3, 0x1ff, 0x7be, 0x5, 0x3, 0x5, 0x868, 0x4, 0x80000000, 0xd8, 0x8, 0x400, 0x1, 0x2, 0x0, 0x1, 0x401, 0x2cab5411, 0xffffffff, 0x2, 0x1f, 0x2, 0x7fff, 0x4, 0x2618, 0x7, 0x3ff, 0x800, 0x1ff, 0xd7cc, 0xa7b, 0xffffffc0, 0x7, 0x4, 0x719, 0x8, 0x6, 0x3, 0x9cd5, 0xfffffffb, 0x200, 0x7ff, 0x9, 0x3, 0x3, 0x81, 0x200, 0x4, 0x3ff, 0x1, 0x1, 0x10000, 0x5c6, 0x10000, 0x1, 0xae, 0xdf1, 0xfffffff9], [0x7fff, 0x2, 0x8001, 0x0, 0xb9, 0x8, 0xffffffe1, 0x5d, 0xffff7fff, 0xb9, 0x19, 0x7, 0x8223, 0x8, 0xfffffff9, 0x0, 0x7, 0x3, 0x8, 0x80, 0x8, 0x401, 0x6, 0x5, 0x1, 0x9, 0x2, 0x0, 0x7d0, 0x2, 0x8, 0xa89, 0x7fff, 0xfff, 0x8001, 0x401, 0x9470, 0x0, 0x5, 0x7, 0x6, 0x4, 0x7, 0x2, 0x5, 0x0, 0xffffffff, 0xabd, 0x2, 0x3, 0x5, 0xb46, 0x3, 0x8000, 0x2, 0xd2, 0x6, 0x3b, 0x7fff, 0x8bd7, 0x0, 0x70, 0x7ff, 0xa7], [0x7f, 0x2, 0xf1e2, 0x7, 0x180000, 0x745b, 0x9, 0x6, 0x2, 0x6c3, 0x8, 0x0, 0x6, 0x3, 0x6d4cdcce, 0x8000, 0xa90d, 0x7ff, 0xe0000000, 0x8, 0x6f2, 0x9, 0x0, 0x3, 0x81, 0x800, 0x1, 0x8, 0x10000, 0x100, 0x20, 0x7, 0x7fffffff, 0xb5, 0x9, 0xb44, 0x48, 0x5, 0x0, 0x800, 0x81, 0x8000, 0x133f, 0x10, 0x841d, 0xffffff80, 0x5, 0x8, 0x6, 0xef, 0x4, 0x8, 0x80000001, 0xfff, 0x8000, 0x9, 0x80000000, 0x200, 0x0, 0x9, 0x6, 0x3, 0xffffff00, 0x7]}, 0x45c) (async)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))

18:53:35 executing program 0:
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/35)
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

18:53:35 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 1130.638823] input: syz1 as /devices/virtual/input/input12141
18:53:35 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100))
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x3f, 0x6}, 0x3d, [0x7f, 0x33, 0x1, 0x9, 0x1, 0x1, 0x3, 0x8de, 0x6, 0x7fff, 0x9, 0x1, 0xfffffff8, 0x9c57, 0x5, 0x6, 0x437b, 0x0, 0xf6c6, 0x7, 0xffff, 0x9, 0x30f, 0x10001, 0x5, 0xca7, 0x80, 0x7, 0x0, 0x3f, 0x3, 0x2a7, 0x6, 0x400, 0x3, 0x101, 0x400, 0x86, 0x9, 0x1000, 0xe1a, 0x3, 0x100, 0x1, 0x3, 0xf4, 0xcfe, 0x3a0, 0xfaea, 0x1, 0x401, 0x2, 0x7, 0x5, 0x9, 0x9d, 0x10000, 0x3, 0x4d23, 0x9, 0x10000, 0x200, 0x1], [0x1, 0xb8e, 0x101, 0xeb7, 0xb28, 0x40, 0x3, 0x1ff, 0x7be, 0x5, 0x3, 0x5, 0x868, 0x4, 0x80000000, 0xd8, 0x8, 0x400, 0x1, 0x2, 0x0, 0x1, 0x401, 0x2cab5411, 0xffffffff, 0x2, 0x1f, 0x2, 0x7fff, 0x4, 0x2618, 0x7, 0x3ff, 0x800, 0x1ff, 0xd7cc, 0xa7b, 0xffffffc0, 0x7, 0x4, 0x719, 0x8, 0x6, 0x3, 0x9cd5, 0xfffffffb, 0x200, 0x7ff, 0x9, 0x3, 0x3, 0x81, 0x200, 0x4, 0x3ff, 0x1, 0x1, 0x10000, 0x5c6, 0x10000, 0x1, 0xae, 0xdf1, 0xfffffff9], [0x7fff, 0x2, 0x8001, 0x0, 0xb9, 0x8, 0xffffffe1, 0x5d, 0xffff7fff, 0xb9, 0x19, 0x7, 0x8223, 0x8, 0xfffffff9, 0x0, 0x7, 0x3, 0x8, 0x80, 0x8, 0x401, 0x6, 0x5, 0x1, 0x9, 0x2, 0x0, 0x7d0, 0x2, 0x8, 0xa89, 0x7fff, 0xfff, 0x8001, 0x401, 0x9470, 0x0, 0x5, 0x7, 0x6, 0x4, 0x7, 0x2, 0x5, 0x0, 0xffffffff, 0xabd, 0x2, 0x3, 0x5, 0xb46, 0x3, 0x8000, 0x2, 0xd2, 0x6, 0x3b, 0x7fff, 0x8bd7, 0x0, 0x70, 0x7ff, 0xa7], [0x7f, 0x2, 0xf1e2, 0x7, 0x180000, 0x745b, 0x9, 0x6, 0x2, 0x6c3, 0x8, 0x0, 0x6, 0x3, 0x6d4cdcce, 0x8000, 0xa90d, 0x7ff, 0xe0000000, 0x8, 0x6f2, 0x9, 0x0, 0x3, 0x81, 0x800, 0x1, 0x8, 0x10000, 0x100, 0x20, 0x7, 0x7fffffff, 0xb5, 0x9, 0xb44, 0x48, 0x5, 0x0, 0x800, 0x81, 0x8000, 0x133f, 0x10, 0x841d, 0xffffff80, 0x5, 0x8, 0x6, 0xef, 0x4, 0x8, 0x80000001, 0xfff, 0x8000, 0x9, 0x80000000, 0x200, 0x0, 0x9, 0x6, 0x3, 0xffffff00, 0x7]}, 0x45c)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000100))
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x9, 0x2})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x6, 0x1, 0x6})

18:53:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x119)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x5, 0x4, 0x1, 0x4, 0x374a, 0xb4, 0x1], 0x7, 0x100800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000140)={0x7, 0x7fff, 0x1})

18:53:35 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1)

18:53:35 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:35 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) (async)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[ 1130.688199] input: syz1 as /devices/virtual/input/input12142
[ 1130.716501] input: syz1 as /devices/virtual/input/input12144
18:53:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x119) (async, rerun: 64)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x5, 0x4, 0x1, 0x4, 0x374a, 0xb4, 0x1], 0x7, 0x100800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000140)={0x7, 0x7fff, 0x1})

[ 1130.766270] input: syz1 as /devices/virtual/input/input12148
[ 1130.775101] FAULT_INJECTION: forcing a failure.
[ 1130.775101] name failslab, interval 1, probability 0, space 0, times 0
18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000100))
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x9, 0x2})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x6, 0x1, 0x6})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000100)) (async)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x9, 0x2}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x6, 0x1, 0x6}) (async)

18:53:35 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1)

[ 1130.809341] input: syz1 as /devices/virtual/input/input12150
[ 1130.812418] CPU: 1 PID: 21347 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1130.823061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1130.832405] Call Trace:
[ 1130.834977]  dump_stack+0x1b2/0x281
[ 1130.838597]  should_fail.cold+0x10a/0x149
[ 1130.842728]  should_failslab+0xd6/0x130
[ 1130.846682]  __kmalloc+0x2c1/0x400
[ 1130.850201]  ? input_ff_create+0x4b/0x2d0
[ 1130.854332]  input_ff_create+0x4b/0x2d0
[ 1130.858287]  uinput_ioctl_handler.isra.0+0x6fd/0x1790
[ 1130.863474]  ? uinput_write+0xfb0/0xfb0
[ 1130.867426]  ? get_pid_task+0xb8/0x130
[ 1130.871312]  ? proc_fail_nth_write+0x7b/0x180
[ 1130.875788]  ? trace_hardirqs_on+0x10/0x10
[ 1130.880021]  ? fsnotify+0x974/0x11b0
[ 1130.883714]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1130.888620]  ? __handle_mm_fault+0x80f/0x4620
[ 1130.893095]  ? SyS_write+0x1b7/0x210
[ 1130.896789]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1130.902226]  do_vfs_ioctl+0x75a/0xff0
[ 1130.906003]  ? lock_acquire+0x170/0x3f0
[ 1130.909955]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1130.914341]  ? __fget+0x265/0x3e0
[ 1130.917771]  ? do_vfs_ioctl+0xff0/0xff0
[ 1130.921724]  ? security_file_ioctl+0x83/0xb0
[ 1130.926112]  SyS_ioctl+0x7f/0xb0
[ 1130.929459]  ? do_vfs_ioctl+0xff0/0xff0
[ 1130.933414]  do_syscall_64+0x1d5/0x640
[ 1130.937284]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1130.942480] RIP: 0033:0x7ff7d472f3c9
[ 1130.946168] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
18:53:35 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 2)

18:53:35 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

18:53:35 executing program 1:
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) (async)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[ 1130.953852] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1130.961107] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1130.968352] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1130.975597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1130.982864] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
18:53:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x119) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x5, 0x4, 0x1, 0x4, 0x374a, 0xb4, 0x1], 0x7, 0x100800, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000140)={0x7, 0x7fff, 0x1})

18:53:35 executing program 1:
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, <r0=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000100)) (async)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x9, 0x2})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x6, 0x1, 0x6})

[ 1131.059002] FAULT_INJECTION: forcing a failure.
[ 1131.059002] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.069081] input: syz1 as /devices/virtual/input/input12154
[ 1131.089458] FAULT_INJECTION: forcing a failure.
[ 1131.089458] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.107130] CPU: 0 PID: 21390 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1131.115036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1131.124391] Call Trace:
[ 1131.126978]  dump_stack+0x1b2/0x281
[ 1131.130716]  should_fail.cold+0x10a/0x149
[ 1131.134863]  should_failslab+0xd6/0x130
[ 1131.138839]  __kmalloc+0x2c1/0x400
[ 1131.142384]  ? input_ff_create+0x80/0x2d0
[ 1131.146532]  input_ff_create+0x80/0x2d0
[ 1131.150249] input: syz1 as /devices/virtual/input/input12158
[ 1131.150536]  uinput_ioctl_handler.isra.0+0x6fd/0x1790
[ 1131.150549]  ? uinput_write+0xfb0/0xfb0
[ 1131.165472]  ? get_pid_task+0xb8/0x130
[ 1131.169344]  ? proc_fail_nth_write+0x7b/0x180
[ 1131.173824]  ? trace_hardirqs_on+0x10/0x10
[ 1131.178045]  ? fsnotify+0x974/0x11b0
[ 1131.181742]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1131.186658]  ? __handle_mm_fault+0x80f/0x4620
[ 1131.191141]  ? SyS_write+0x1b7/0x210
[ 1131.194844]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1131.200284]  do_vfs_ioctl+0x75a/0xff0
[ 1131.204069]  ? lock_acquire+0x170/0x3f0
[ 1131.208031]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1131.212423]  ? __fget+0x265/0x3e0
[ 1131.215857]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.219814]  ? security_file_ioctl+0x83/0xb0
[ 1131.224204]  SyS_ioctl+0x7f/0xb0
[ 1131.227551]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.231510]  do_syscall_64+0x1d5/0x640
[ 1131.235384]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1131.240552] RIP: 0033:0x7ff7d472f3c9
[ 1131.244246] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1131.251938] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
18:53:35 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

18:53:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1131.259190] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1131.266444] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1131.273693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1131.280944] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1131.298185] CPU: 1 PID: 21391 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
18:53:35 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 3)

[ 1131.306119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1131.315470] Call Trace:
[ 1131.318056]  dump_stack+0x1b2/0x281
[ 1131.321716]  should_fail.cold+0x10a/0x149
[ 1131.325968]  should_failslab+0xd6/0x130
[ 1131.329924]  __kmalloc+0x2c1/0x400
[ 1131.333470]  ? input_ff_create+0x4b/0x2d0
[ 1131.337596]  input_ff_create+0x4b/0x2d0
[ 1131.341566]  uinput_ioctl_handler.isra.0+0x6fd/0x1790
[ 1131.346741]  ? uinput_write+0xfb0/0xfb0
[ 1131.350816]  ? get_pid_task+0xb8/0x130
[ 1131.354687]  ? proc_fail_nth_write+0x7b/0x180
[ 1131.359167]  ? trace_hardirqs_on+0x10/0x10
[ 1131.363401]  ? fsnotify+0x974/0x11b0
[ 1131.367095]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1131.372003]  ? __handle_mm_fault+0x80f/0x4620
[ 1131.376480]  ? SyS_write+0x1b7/0x210
[ 1131.380183]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1131.385757]  do_vfs_ioctl+0x75a/0xff0
[ 1131.389555]  ? lock_acquire+0x170/0x3f0
[ 1131.393512]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1131.397910]  ? __fget+0x265/0x3e0
[ 1131.401442]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.405521]  ? security_file_ioctl+0x83/0xb0
[ 1131.409926]  SyS_ioctl+0x7f/0xb0
[ 1131.413444]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.417674]  do_syscall_64+0x1d5/0x640
[ 1131.421548]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1131.426716] RIP: 0033:0x7f982cb5a3c9
[ 1131.430402] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1131.438088] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1131.445337] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1131.452599] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
18:53:35 executing program 1:
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, <r0=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))

18:53:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0xfffffffc], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c)

[ 1131.459863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1131.467225] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
[ 1131.516989] input: syz1 as /devices/virtual/input/input12159
[ 1131.526760] FAULT_INJECTION: forcing a failure.
[ 1131.526760] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.527829] input: syz1 as /devices/virtual/input/input12161
18:53:36 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 2)

18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0xfffffffc], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0xfffffffc], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) (async)

18:53:36 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1131.571145] CPU: 1 PID: 21424 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1131.579058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1131.588407] Call Trace:
[ 1131.591033]  dump_stack+0x1b2/0x281
[ 1131.594643]  should_fail.cold+0x10a/0x149
[ 1131.598776]  should_failslab+0xd6/0x130
[ 1131.602734]  __kmalloc+0x2c1/0x400
[ 1131.606367]  ? input_register_device+0x419/0xa90
[ 1131.611102]  input_register_device+0x419/0xa90
[ 1131.615825]  ? input_ff_create+0x58/0x2d0
[ 1131.619956]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1131.625125]  ? uinput_write+0xfb0/0xfb0
[ 1131.629187]  ? get_pid_task+0xb8/0x130
[ 1131.633088]  ? proc_fail_nth_write+0x7b/0x180
[ 1131.638003]  ? trace_hardirqs_on+0x10/0x10
[ 1131.642221]  ? fsnotify+0x974/0x11b0
[ 1131.645919]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1131.650831]  ? __handle_mm_fault+0x80f/0x4620
[ 1131.655485]  ? SyS_write+0x1b7/0x210
[ 1131.659192]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1131.664619]  do_vfs_ioctl+0x75a/0xff0
[ 1131.668509]  ? lock_acquire+0x170/0x3f0
[ 1131.672462]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1131.676847]  ? __fget+0x265/0x3e0
[ 1131.680277]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.684234]  ? security_file_ioctl+0x83/0xb0
[ 1131.688642]  SyS_ioctl+0x7f/0xb0
[ 1131.691988]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.695941]  do_syscall_64+0x1d5/0x640
[ 1131.699808]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1131.704979] RIP: 0033:0x7ff7d472f3c9
[ 1131.708672] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
18:53:36 executing program 1:
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, <r0=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000c80)) (async)

18:53:36 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 4)

[ 1131.716372] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1131.723621] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1131.730870] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1131.738205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1131.745643] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1131.795200] FAULT_INJECTION: forcing a failure.
[ 1131.795200] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.797357] input: syz1 as /devices/virtual/input/input12163
[ 1131.807228] CPU: 0 PID: 21450 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1131.820423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1131.829773] Call Trace:
[ 1131.832364]  dump_stack+0x1b2/0x281
[ 1131.835999]  should_fail.cold+0x10a/0x149
[ 1131.840281]  should_failslab+0xd6/0x130
[ 1131.844256]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1131.848967]  device_add+0xd72/0x15c0
[ 1131.852682]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1131.858215]  ? device_is_dependent+0x2a0/0x2a0
[ 1131.862795]  ? __kmalloc+0x3a4/0x400
[ 1131.866592]  ? input_register_device+0x419/0xa90
[ 1131.871372]  input_register_device+0x59e/0xa90
[ 1131.875958]  ? input_ff_create+0x58/0x2d0
[ 1131.880132]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1131.885423]  ? uinput_write+0xfb0/0xfb0
[ 1131.889401]  ? get_pid_task+0xb8/0x130
[ 1131.893290]  ? proc_fail_nth_write+0x7b/0x180
[ 1131.897787]  ? trace_hardirqs_on+0x10/0x10
[ 1131.902111]  ? fsnotify+0x974/0x11b0
[ 1131.905823]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1131.907509] FAULT_INJECTION: forcing a failure.
[ 1131.907509] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.910747]  ? __handle_mm_fault+0x80f/0x4620
[ 1131.910758]  ? SyS_write+0x1b7/0x210
[ 1131.910774]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1131.910784]  do_vfs_ioctl+0x75a/0xff0
[ 1131.910799]  ? lock_acquire+0x170/0x3f0
[ 1131.943332]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1131.947769]  ? __fget+0x265/0x3e0
[ 1131.951220]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.955189]  ? security_file_ioctl+0x83/0xb0
[ 1131.959693]  SyS_ioctl+0x7f/0xb0
[ 1131.963056]  ? do_vfs_ioctl+0xff0/0xff0
[ 1131.967034]  do_syscall_64+0x1d5/0x640
[ 1131.970927]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1131.976124] RIP: 0033:0x7ff7d472f3c9
[ 1131.979823] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1131.987520] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
18:53:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0xfffffffc], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c)

18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f5ef76a8ce0d883594b85ca46e127bc9c22dae856d1cf8e84eead26d7e28", 0x4, 0x2, 0x0, 0x8, 0x8, 0x3f, 0xb, 0x3, [0x6bc3, 0xfffffff7, 0xa16f, 0x1f, 0xd8, 0x43a, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1, 0x8000, 0x10000, 0x1f, 0x2, 0x394b, 0x61800ab6, 0x5]})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1131.994775] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1132.002036] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1132.009501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1132.016762] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1132.035648] CPU: 1 PID: 21444 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f5ef76a8ce0d883594b85ca46e127bc9c22dae856d1cf8e84eead26d7e28", 0x4, 0x2, 0x0, 0x8, 0x8, 0x3f, 0xb, 0x3, [0x6bc3, 0xfffffff7, 0xa16f, 0x1f, 0xd8, 0x43a, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1, 0x8000, 0x10000, 0x1f, 0x2, 0x394b, 0x61800ab6, 0x5]})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f5ef76a8ce0d883594b85ca46e127bc9c22dae856d1cf8e84eead26d7e28", 0x4, 0x2, 0x0, 0x8, 0x8, 0x3f, 0xb, 0x3, [0x6bc3, 0xfffffff7, 0xa16f, 0x1f, 0xd8, 0x43a, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1, 0x8000, 0x10000, 0x1f, 0x2, 0x394b, 0x61800ab6, 0x5]}) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f5ef76a8ce0d883594b85ca46e127bc9c22dae856d1cf8e84eead26d7e28", 0x4, 0x2, 0x0, 0x8, 0x8, 0x3f, 0xb, 0x3, [0x6bc3, 0xfffffff7, 0xa16f, 0x1f, 0xd8, 0x43a, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1, 0x8000, 0x10000, 0x1f, 0x2, 0x394b, 0x61800ab6, 0x5]})
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1132.043545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1132.052894] Call Trace:
[ 1132.055481]  dump_stack+0x1b2/0x281
[ 1132.059111]  should_fail.cold+0x10a/0x149
[ 1132.063266]  should_failslab+0xd6/0x130
[ 1132.067256]  __kmalloc+0x2c1/0x400
[ 1132.069373] input: syz1 as /devices/virtual/input/input12167
[ 1132.070801]  ? input_ff_create+0x80/0x2d0
[ 1132.070814]  input_ff_create+0x80/0x2d0
[ 1132.070828]  uinput_ioctl_handler.isra.0+0x6fd/0x1790
[ 1132.070838]  ? uinput_write+0xfb0/0xfb0
18:53:36 executing program 2:
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1132.093842]  ? get_pid_task+0xb8/0x130
[ 1132.097738]  ? proc_fail_nth_write+0x7b/0x180
[ 1132.102235]  ? trace_hardirqs_on+0x10/0x10
[ 1132.106473]  ? fsnotify+0x974/0x11b0
[ 1132.110183]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1132.115107]  ? __handle_mm_fault+0x80f/0x4620
[ 1132.119597]  ? SyS_write+0x1b7/0x210
[ 1132.123320]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1132.128778]  do_vfs_ioctl+0x75a/0xff0
[ 1132.132578]  ? lock_acquire+0x170/0x3f0
[ 1132.136552]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1132.140959]  ? __fget+0x265/0x3e0
[ 1132.144413]  ? do_vfs_ioctl+0xff0/0xff0
[ 1132.148389]  ? security_file_ioctl+0x83/0xb0
[ 1132.152792]  SyS_ioctl+0x7f/0xb0
[ 1132.156163]  ? do_vfs_ioctl+0xff0/0xff0
[ 1132.160142]  do_syscall_64+0x1d5/0x640
[ 1132.164031]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1132.169219] RIP: 0033:0x7f982cb5a3c9
[ 1132.172927] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1132.180634] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1132.187894] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1132.195210] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1132.202476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1132.209738] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
18:53:36 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 3)

18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{}, 0x5}, 0x18)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x107402, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0xc9e3, 0x4], 0x3, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0xffff6ccd, 0x0, 0x9, 0x7ff})
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000280)={0x2, 0x8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)

18:53:36 executing program 2:
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)

18:53:36 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 5)

18:53:36 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)

18:53:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x7ff, 0x3fff, 0x2, 0x2, 0xfffffffc], 0x6, 0x80000, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000880)={0xd, 0x6, {0x54, 0x2, 0x7, {0x9b6d, 0x3}, {}, @ramp={0x2d76, 0x7, {0x5f4, 0xcd87, 0x5, 0x7}}}, {0x57, 0x9, 0x0, {0x6, 0x40}, {0x0, 0x9}, @cond=[{0xad3, 0x2, 0x800, 0x8e31, 0x3ff, 0x7}, {0x58ed, 0x3, 0x0, 0x0, 0x400, 0x4}]}})
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000800)={0x4, 0x3f, 0x2, 0x6b9})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x100, 0x5, 0x3ff, 0x1, 0x800, 0x2, 0x5, 0x3, 0x3503], 0x9, 0x180400})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x98b, 0x0, 0x9, 0x11, 0x5, "0c3ce7b07695506c775ec8daad2d6425f323ad14ba8d9889a9270b06646a2de3fc58437304b7b26c0e99a60e8448d83d4cc9acf4268ad19c5c2d966f13bd590a", "45d7eee25f83e78ff71c755d75576d74842edbe87caf5e5beeb945c93cbc6b00459defc4fdcb7b31bb97c6e3120cbbc5797724042f5dcee42eda5b7f76725b96", "d0da878173e1c7f2ed3ca408ca333eda91ec1c9708c07486520882c7b30950b5", [0x6, 0x10000]})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r4)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x3]}, 0x45c)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000780)=0x498)

18:53:36 executing program 2:
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{}, 0x5}, 0x18) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x107402, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0xc9e3, 0x4], 0x3, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0xffff6ccd, 0x0, 0x9, 0x7ff})
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000280)={0x2, 0x8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)

[ 1132.291429] input: syz1 as /devices/virtual/input/input12170
[ 1132.305144] FAULT_INJECTION: forcing a failure.
[ 1132.305144] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.306218] FAULT_INJECTION: forcing a failure.
[ 1132.306218] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.318866] CPU: 1 PID: 21513 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
[ 1132.335557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1132.344906] Call Trace:
[ 1132.347488]  dump_stack+0x1b2/0x281
[ 1132.351118]  should_fail.cold+0x10a/0x149
[ 1132.355270]  should_failslab+0xd6/0x130
[ 1132.359245]  __kmalloc+0x2c1/0x400
[ 1132.362781]  ? input_register_device+0x419/0xa90
[ 1132.367530]  input_register_device+0x419/0xa90
[ 1132.372105]  ? input_ff_create+0x58/0x2d0
[ 1132.376250]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1132.381435]  ? uinput_write+0xfb0/0xfb0
[ 1132.385405]  ? get_pid_task+0xb8/0x130
[ 1132.389283]  ? proc_fail_nth_write+0x7b/0x180
[ 1132.393771]  ? trace_hardirqs_on+0x10/0x10
[ 1132.398001]  ? fsnotify+0x974/0x11b0
[ 1132.401707]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1132.406648]  ? __handle_mm_fault+0x80f/0x4620
[ 1132.411143]  ? SyS_write+0x1b7/0x210
[ 1132.414849]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1132.420307]  do_vfs_ioctl+0x75a/0xff0
[ 1132.424102]  ? lock_acquire+0x170/0x3f0
[ 1132.428070]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1132.432477]  ? __fget+0x265/0x3e0
[ 1132.435940]  ? do_vfs_ioctl+0xff0/0xff0
[ 1132.439908]  ? security_file_ioctl+0x83/0xb0
[ 1132.444309]  SyS_ioctl+0x7f/0xb0
[ 1132.447669]  ? do_vfs_ioctl+0xff0/0xff0
[ 1132.451640]  do_syscall_64+0x1d5/0x640
[ 1132.455521]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1132.460693] RIP: 0033:0x7f982cb5a3c9
[ 1132.464391] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1132.472093] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1132.479348] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
18:53:37 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)

[ 1132.486610] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1132.493878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1132.501141] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
[ 1132.508427] CPU: 0 PID: 21509 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1132.516311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1132.525657] Call Trace:
[ 1132.528243]  dump_stack+0x1b2/0x281
[ 1132.531871]  should_fail.cold+0x10a/0x149
[ 1132.536032]  should_failslab+0xd6/0x130
18:53:37 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 4)

[ 1132.540008]  __kmalloc_track_caller+0x2bc/0x400
[ 1132.544674]  ? kstrdup_const+0x35/0x60
[ 1132.548591]  kstrdup+0x36/0x70
[ 1132.551781]  kstrdup_const+0x35/0x60
[ 1132.555496]  __kernfs_new_node+0x2e/0x470
[ 1132.559645]  kernfs_create_dir_ns+0x8c/0x200
[ 1132.565855]  sysfs_create_dir_ns+0xb7/0x1d0
[ 1132.570178]  kobject_add_internal+0x28b/0x930
[ 1132.574676]  kobject_add+0x11f/0x180
[ 1132.578389]  ? kset_create_and_add+0x190/0x190
[ 1132.582978]  device_add+0x33f/0x15c0
[ 1132.586689]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1132.592145]  ? device_is_dependent+0x2a0/0x2a0
[ 1132.596708]  ? __kmalloc+0x3a4/0x400
[ 1132.600432]  ? input_register_device+0x419/0xa90
[ 1132.605180]  input_register_device+0x59e/0xa90
[ 1132.609749]  ? input_ff_create+0x58/0x2d0
[ 1132.613907]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1132.619085]  ? uinput_write+0xfb0/0xfb0
[ 1132.623044]  ? get_pid_task+0xb8/0x130
[ 1132.626921]  ? proc_fail_nth_write+0x7b/0x180
[ 1132.631455]  ? trace_hardirqs_on+0x10/0x10
[ 1132.635695]  ? fsnotify+0x974/0x11b0
[ 1132.639391]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1132.644313]  ? __handle_mm_fault+0x80f/0x4620
[ 1132.648814]  ? SyS_write+0x1b7/0x210
[ 1132.652510]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1132.657939]  do_vfs_ioctl+0x75a/0xff0
[ 1132.661727]  ? lock_acquire+0x170/0x3f0
[ 1132.665686]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1132.670075]  ? __fget+0x265/0x3e0
[ 1132.673515]  ? do_vfs_ioctl+0xff0/0xff0
[ 1132.677476]  ? security_file_ioctl+0x83/0xb0
[ 1132.681864]  SyS_ioctl+0x7f/0xb0
[ 1132.685215]  ? do_vfs_ioctl+0xff0/0xff0
[ 1132.689172]  do_syscall_64+0x1d5/0x640
[ 1132.693053]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1132.698328] RIP: 0033:0x7ff7d472f3c9
[ 1132.702017] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1132.709704] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1132.716955] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1132.724211] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1132.731465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
18:53:37 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2cb)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{}, 0x5}, 0x18) (async, rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x107402, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0xc9e3, 0x4], 0x3, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0xffff6ccd, 0x0, 0x9, 0x7ff}) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000280)={0x2, 0x8}) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)

18:53:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x7ff, 0x3fff, 0x2, 0x2, 0xfffffffc], 0x6, 0x80000, 0x0, <r1=>0xffffffffffffffff}) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000880)={0xd, 0x6, {0x54, 0x2, 0x7, {0x9b6d, 0x3}, {}, @ramp={0x2d76, 0x7, {0x5f4, 0xcd87, 0x5, 0x7}}}, {0x57, 0x9, 0x0, {0x6, 0x40}, {0x0, 0x9}, @cond=[{0xad3, 0x2, 0x800, 0x8e31, 0x3ff, 0x7}, {0x58ed, 0x3, 0x0, 0x0, 0x400, 0x4}]}}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000800)={0x4, 0x3f, 0x2, 0x6b9}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x100, 0x5, 0x3ff, 0x1, 0x800, 0x2, 0x5, 0x3, 0x3503], 0x9, 0x180400}) (async)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x98b, 0x0, 0x9, 0x11, 0x5, "0c3ce7b07695506c775ec8daad2d6425f323ad14ba8d9889a9270b06646a2de3fc58437304b7b26c0e99a60e8448d83d4cc9acf4268ad19c5c2d966f13bd590a", "45d7eee25f83e78ff71c755d75576d74842edbe87caf5e5beeb945c93cbc6b00459defc4fdcb7b31bb97c6e3120cbbc5797724042f5dcee42eda5b7f76725b96", "d0da878173e1c7f2ed3ca408ca333eda91ec1c9708c07486520882c7b30950b5", [0x6, 0x10000]})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r4)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x3]}, 0x45c)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) (async)
ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000780)=0x498)

18:53:37 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)

18:53:37 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 6)

[ 1132.738711] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1132.753718] kobject_add_internal failed for input12171 (error: -12 parent: input)
18:53:37 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2f6d, 0x0, 0x9, 0x1b, 0x14, "0fc4999599c026f34ec98f0c6fe1f1900e8c849eb8c84afb35e71adbac786f088371be8286fcd596505c7057f9f4735590346ff7affd98395a2813b349198703", "c6005ffbad6d9d4f141f9d5bf7ca22bc64712ea939a25a40f814d3782c3bbfbc2faaf7b45795e68fd845409110b8e3634b885aab1c61e8be0a72502ccc516eae", "3a63073219abe60d015c01a884533503b91ce6f2e39d32f5975b079c5a82c88e", [0x0, 0x7fffffff]})

[ 1132.802685] input: syz1 as /devices/virtual/input/input12176
[ 1132.810166] FAULT_INJECTION: forcing a failure.
[ 1132.810166] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.818462] FAULT_INJECTION: forcing a failure.
[ 1132.818462] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.821855] input: syz1 as /devices/virtual/input/input12177
18:53:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x7ff, 0x3fff, 0x2, 0x2, 0xfffffffc], 0x6, 0x80000, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000880)={0xd, 0x6, {0x54, 0x2, 0x7, {0x9b6d, 0x3}, {}, @ramp={0x2d76, 0x7, {0x5f4, 0xcd87, 0x5, 0x7}}}, {0x57, 0x9, 0x0, {0x6, 0x40}, {0x0, 0x9}, @cond=[{0xad3, 0x2, 0x800, 0x8e31, 0x3ff, 0x7}, {0x58ed, 0x3, 0x0, 0x0, 0x400, 0x4}]}}) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000800)={0x4, 0x3f, 0x2, 0x6b9}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x100, 0x5, 0x3ff, 0x1, 0x800, 0x2, 0x5, 0x3, 0x3503], 0x9, 0x180400}) (async)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x98b, 0x0, 0x9, 0x11, 0x5, "0c3ce7b07695506c775ec8daad2d6425f323ad14ba8d9889a9270b06646a2de3fc58437304b7b26c0e99a60e8448d83d4cc9acf4268ad19c5c2d966f13bd590a", "45d7eee25f83e78ff71c755d75576d74842edbe87caf5e5beeb945c93cbc6b00459defc4fdcb7b31bb97c6e3120cbbc5797724042f5dcee42eda5b7f76725b96", "d0da878173e1c7f2ed3ca408ca333eda91ec1c9708c07486520882c7b30950b5", [0x6, 0x10000]}) (async)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r4)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x3]}, 0x45c)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000780)=0x498)

18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1132.862674] CPU: 0 PID: 21545 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1132.870582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1132.879932] Call Trace:
[ 1132.882547]  dump_stack+0x1b2/0x281
[ 1132.886173]  should_fail.cold+0x10a/0x149
[ 1132.890321]  should_failslab+0xd6/0x130
[ 1132.894297]  kmem_cache_alloc+0x28e/0x3c0
[ 1132.898441]  __kernfs_new_node+0x6f/0x470
[ 1132.902581]  kernfs_create_dir_ns+0x8c/0x200
[ 1132.906983]  sysfs_create_dir_ns+0xb7/0x1d0
18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1132.911324]  kobject_add_internal+0x28b/0x930
[ 1132.915815]  kobject_add+0x11f/0x180
[ 1132.919523]  ? kset_create_and_add+0x190/0x190
[ 1132.924102]  device_add+0x33f/0x15c0
[ 1132.927812]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1132.933252]  ? device_is_dependent+0x2a0/0x2a0
[ 1132.937828]  ? __kmalloc+0x3a4/0x400
[ 1132.941539]  ? input_register_device+0x419/0xa90
[ 1132.946295]  input_register_device+0x59e/0xa90
[ 1132.950874]  ? input_ff_create+0x58/0x2d0
[ 1132.955025]  uinput_ioctl_handler.isra.0+0x84c/0x1790
18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1132.960228]  ? uinput_write+0xfb0/0xfb0
[ 1132.964202]  ? get_pid_task+0xb8/0x130
[ 1132.968082]  ? proc_fail_nth_write+0x7b/0x180
[ 1132.972654]  ? trace_hardirqs_on+0x10/0x10
[ 1132.976891]  ? fsnotify+0x974/0x11b0
[ 1132.980601]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1132.985432] input: syz1 as /devices/virtual/input/input12182
[ 1132.985534]  ? __handle_mm_fault+0x80f/0x4620
[ 1132.995796]  ? SyS_write+0x1b7/0x210
[ 1132.999513]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1133.004960]  do_vfs_ioctl+0x75a/0xff0
[ 1133.008843]  ? lock_acquire+0x170/0x3f0
[ 1133.012812]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1133.017217]  ? __fget+0x265/0x3e0
[ 1133.020674]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.024651]  ? security_file_ioctl+0x83/0xb0
[ 1133.029168]  SyS_ioctl+0x7f/0xb0
[ 1133.032526]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.036502]  do_syscall_64+0x1d5/0x640
[ 1133.040396]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1133.045581] RIP: 0033:0x7ff7d472f3c9
[ 1133.049295] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1133.056996] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1133.064255] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1133.071510] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1133.078769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1133.086034] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1133.098626] CPU: 1 PID: 21538 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
[ 1133.099793] kobject_add_internal failed for input12181 (error: -12 parent: input)
[ 1133.106510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1133.106514] Call Trace:
[ 1133.106528]  dump_stack+0x1b2/0x281
[ 1133.106542]  should_fail.cold+0x10a/0x149
[ 1133.106555]  should_failslab+0xd6/0x130
[ 1133.106567]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1133.106579]  device_add+0xd72/0x15c0
[ 1133.106591]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1133.106600]  ? device_is_dependent+0x2a0/0x2a0
[ 1133.106608]  ? __kmalloc+0x3a4/0x400
[ 1133.106617]  ? input_register_device+0x419/0xa90
[ 1133.106629]  input_register_device+0x59e/0xa90
[ 1133.106638]  ? input_ff_create+0x58/0x2d0
[ 1133.106652]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1133.106663]  ? uinput_write+0xfb0/0xfb0
[ 1133.106672]  ? get_pid_task+0xb8/0x130
[ 1133.106682]  ? proc_fail_nth_write+0x7b/0x180
[ 1133.106693]  ? trace_hardirqs_on+0x10/0x10
[ 1133.195060]  ? fsnotify+0x974/0x11b0
[ 1133.198756]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1133.203663]  ? __handle_mm_fault+0x80f/0x4620
[ 1133.208136]  ? SyS_write+0x1b7/0x210
[ 1133.211830]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1133.217259]  do_vfs_ioctl+0x75a/0xff0
[ 1133.221054]  ? lock_acquire+0x170/0x3f0
[ 1133.225021]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1133.229425]  ? __fget+0x265/0x3e0
[ 1133.232859]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.236814]  ? security_file_ioctl+0x83/0xb0
[ 1133.241219]  SyS_ioctl+0x7f/0xb0
[ 1133.244568]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.248542]  do_syscall_64+0x1d5/0x640
[ 1133.252412]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1133.257583] RIP: 0033:0x7f982cb5a3c9
[ 1133.261280] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1133.268976] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1133.276228] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1133.283493] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1133.290750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1133.297998] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
18:53:37 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 5)

18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:37 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 7)

18:53:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
write$input_event(r0, &(0x7f0000000000)={{}, 0x17, 0x9, 0x5}, 0x18)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x800)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

18:53:37 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2cb)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:37 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2f6d, 0x0, 0x9, 0x1b, 0x14, "0fc4999599c026f34ec98f0c6fe1f1900e8c849eb8c84afb35e71adbac786f088371be8286fcd596505c7057f9f4735590346ff7affd98395a2813b349198703", "c6005ffbad6d9d4f141f9d5bf7ca22bc64712ea939a25a40f814d3782c3bbfbc2faaf7b45795e68fd845409110b8e3634b885aab1c61e8be0a72502ccc516eae", "3a63073219abe60d015c01a884533503b91ce6f2e39d32f5975b079c5a82c88e", [0x0, 0x7fffffff]})

18:53:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

[ 1133.378920] FAULT_INJECTION: forcing a failure.
[ 1133.378920] name failslab, interval 1, probability 0, space 0, times 0
[ 1133.390437] CPU: 0 PID: 21590 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1133.398323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1133.407380] FAULT_INJECTION: forcing a failure.
[ 1133.407380] name failslab, interval 1, probability 0, space 0, times 0
[ 1133.407669] Call Trace:
[ 1133.421740]  dump_stack+0x1b2/0x281
[ 1133.425370]  should_fail.cold+0x10a/0x149
[ 1133.429510]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1133.434868]  should_failslab+0xd6/0x130
[ 1133.438834]  kmem_cache_alloc+0x40/0x3c0
[ 1133.442881]  radix_tree_node_alloc.constprop.0+0x1b0/0x2f0
[ 1133.448511]  ? kasan_kmalloc+0x139/0x160
[ 1133.452558]  radix_tree_extend+0x158/0x3e0
[ 1133.456782]  ? __lock_acquire+0x5fc/0x3f20
[ 1133.461024]  idr_get_free_cmn+0x650/0x8d0
[ 1133.465160]  ? trace_hardirqs_on+0x10/0x10
[ 1133.469390]  idr_alloc_cmn+0xe8/0x1e0
[ 1133.473188]  ? __fprop_inc_percpu_max+0x1d0/0x1d0
[ 1133.478025]  ? fs_reclaim_release+0xd0/0x110
[ 1133.482432]  ? fs_reclaim_release+0xd0/0x110
[ 1133.486836]  idr_alloc_cyclic+0xc2/0x1d0
[ 1133.490885]  ? idr_alloc_cmn+0x1e0/0x1e0
[ 1133.494934]  ? __radix_tree_preload+0x1c3/0x250
[ 1133.499596]  __kernfs_new_node+0xaf/0x470
[ 1133.503728]  kernfs_create_dir_ns+0x8c/0x200
[ 1133.508118]  sysfs_create_dir_ns+0xb7/0x1d0
[ 1133.512427]  kobject_add_internal+0x28b/0x930
[ 1133.516909]  kobject_add+0x11f/0x180
[ 1133.520608]  ? kset_create_and_add+0x190/0x190
[ 1133.525185]  device_add+0x33f/0x15c0
18:53:38 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 64)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2cb) (rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1133.528889]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1133.534331]  ? device_is_dependent+0x2a0/0x2a0
[ 1133.538905]  ? __kmalloc+0x3a4/0x400
[ 1133.542610]  ? input_register_device+0x419/0xa90
[ 1133.547354]  input_register_device+0x59e/0xa90
[ 1133.551931]  ? input_ff_create+0x58/0x2d0
[ 1133.556086]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1133.561269]  ? uinput_write+0xfb0/0xfb0
[ 1133.565231]  ? get_pid_task+0xb8/0x130
[ 1133.569104]  ? proc_fail_nth_write+0x7b/0x180
[ 1133.573586]  ? trace_hardirqs_on+0x10/0x10
[ 1133.577815]  ? fsnotify+0x974/0x11b0
[ 1133.581510]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1133.586422]  ? __handle_mm_fault+0x80f/0x4620
[ 1133.590901]  ? SyS_write+0x1b7/0x210
[ 1133.594609]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1133.600047]  do_vfs_ioctl+0x75a/0xff0
[ 1133.603835]  ? lock_acquire+0x170/0x3f0
[ 1133.607792]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1133.612185]  ? __fget+0x265/0x3e0
[ 1133.615626]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.619591]  ? security_file_ioctl+0x83/0xb0
[ 1133.623983]  SyS_ioctl+0x7f/0xb0
[ 1133.627336]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.631296]  do_syscall_64+0x1d5/0x640
[ 1133.635179]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1133.640354] RIP: 0033:0x7ff7d472f3c9
[ 1133.644048] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1133.651758] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1133.659015] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1133.666273] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1133.673536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1133.680800] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1133.688082] CPU: 1 PID: 21597 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
[ 1133.689523] input: syz1 as /devices/virtual/input/input12185
[ 1133.695979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1133.695982] Call Trace:
[ 1133.695996]  dump_stack+0x1b2/0x281
[ 1133.696010]  should_fail.cold+0x10a/0x149
[ 1133.696023]  should_failslab+0xd6/0x130
[ 1133.725493]  __kmalloc_track_caller+0x2bc/0x400
[ 1133.730142]  ? kstrdup_const+0x35/0x60
[ 1133.734006]  kstrdup+0x36/0x70
[ 1133.737178]  kstrdup_const+0x35/0x60
[ 1133.740869]  __kernfs_new_node+0x2e/0x470
[ 1133.745105]  kernfs_create_dir_ns+0x8c/0x200
[ 1133.749491]  sysfs_create_dir_ns+0xb7/0x1d0
[ 1133.753792]  kobject_add_internal+0x28b/0x930
[ 1133.758269]  kobject_add+0x11f/0x180
[ 1133.761962]  ? kset_create_and_add+0x190/0x190
[ 1133.766524]  device_add+0x33f/0x15c0
[ 1133.770231]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1133.775660]  ? device_is_dependent+0x2a0/0x2a0
[ 1133.780219]  ? __kmalloc+0x3a4/0x400
[ 1133.783926]  ? input_register_device+0x419/0xa90
[ 1133.788659]  input_register_device+0x59e/0xa90
[ 1133.793216]  ? input_ff_create+0x58/0x2d0
[ 1133.797341]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1133.802514]  ? uinput_write+0xfb0/0xfb0
[ 1133.806466]  ? get_pid_task+0xb8/0x130
[ 1133.810340]  ? proc_fail_nth_write+0x7b/0x180
[ 1133.814826]  ? trace_hardirqs_on+0x10/0x10
[ 1133.819039]  ? fsnotify+0x974/0x11b0
[ 1133.822732]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1133.827653]  ? __handle_mm_fault+0x80f/0x4620
[ 1133.832124]  ? SyS_write+0x1b7/0x210
[ 1133.835818]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1133.841247]  do_vfs_ioctl+0x75a/0xff0
[ 1133.845034]  ? lock_acquire+0x170/0x3f0
[ 1133.848984]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1133.853371]  ? __fget+0x265/0x3e0
[ 1133.856802]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.860755]  ? security_file_ioctl+0x83/0xb0
[ 1133.865144]  SyS_ioctl+0x7f/0xb0
[ 1133.868489]  ? do_vfs_ioctl+0xff0/0xff0
[ 1133.872441]  do_syscall_64+0x1d5/0x640
[ 1133.876310]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1133.881473] RIP: 0033:0x7f982cb5a3c9
[ 1133.885160] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1133.892844] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1133.900091] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1133.907335] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1133.914582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1133.921828] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
18:53:38 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2f6d, 0x0, 0x9, 0x1b, 0x14, "0fc4999599c026f34ec98f0c6fe1f1900e8c849eb8c84afb35e71adbac786f088371be8286fcd596505c7057f9f4735590346ff7affd98395a2813b349198703", "c6005ffbad6d9d4f141f9d5bf7ca22bc64712ea939a25a40f814d3782c3bbfbc2faaf7b45795e68fd845409110b8e3634b885aab1c61e8be0a72502ccc516eae", "3a63073219abe60d015c01a884533503b91ce6f2e39d32f5975b079c5a82c88e", [0x0, 0x7fffffff]})
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80)) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2f6d, 0x0, 0x9, 0x1b, 0x14, "0fc4999599c026f34ec98f0c6fe1f1900e8c849eb8c84afb35e71adbac786f088371be8286fcd596505c7057f9f4735590346ff7affd98395a2813b349198703", "c6005ffbad6d9d4f141f9d5bf7ca22bc64712ea939a25a40f814d3782c3bbfbc2faaf7b45795e68fd845409110b8e3634b885aab1c61e8be0a72502ccc516eae", "3a63073219abe60d015c01a884533503b91ce6f2e39d32f5975b079c5a82c88e", [0x0, 0x7fffffff]}) (async)

18:53:38 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
write$input_event(r0, &(0x7f0000000000)={{}, 0x17, 0x9, 0x5}, 0x18)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x800) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

18:53:38 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 8)

18:53:38 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xfffe, 0x7, 0x5, 0x5}, 'syz0\x00', 0x26})
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2d6)

[ 1133.939081] kobject_add_internal failed for input12186 (error: -12 parent: input)
18:53:38 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 6)

18:53:38 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x4})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:38 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async, rerun: 64)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xfffe, 0x7, 0x5, 0x5}, 'syz0\x00', 0x26}) (async, rerun: 32)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) (async, rerun: 32)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) (async)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2d6)

[ 1133.996033] input: syz1 as /devices/virtual/input/input12187
[ 1133.997242] input: syz1 as /devices/virtual/input/input12188
[ 1134.013783] FAULT_INJECTION: forcing a failure.
[ 1134.013783] name failslab, interval 1, probability 0, space 0, times 0
[ 1134.045140] CPU: 1 PID: 21621 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1134.048015] FAULT_INJECTION: forcing a failure.
[ 1134.048015] name failslab, interval 1, probability 0, space 0, times 0
[ 1134.053038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1134.053043] Call Trace:
[ 1134.053058]  dump_stack+0x1b2/0x281
[ 1134.053073]  should_fail.cold+0x10a/0x149
[ 1134.053087]  should_failslab+0xd6/0x130
[ 1134.053100]  kmem_cache_alloc+0x28e/0x3c0
[ 1134.053113]  __kernfs_new_node+0x6f/0x470
[ 1134.053126]  kernfs_new_node+0x7b/0xe0
[ 1134.053137]  kernfs_create_link+0x27/0x160
[ 1134.053147]  sysfs_do_create_link_sd+0x90/0x120
[ 1134.053157]  sysfs_create_link+0x5f/0xc0
[ 1134.053168]  device_add+0x461/0x15c0
[ 1134.053180]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1134.053189]  ? device_is_dependent+0x2a0/0x2a0
[ 1134.053196]  ? __kmalloc+0x3a4/0x400
[ 1134.053211]  ? input_register_device+0x419/0xa90
[ 1134.135084]  input_register_device+0x59e/0xa90
[ 1134.139655]  ? input_ff_create+0x58/0x2d0
[ 1134.143791]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1134.148968]  ? uinput_write+0xfb0/0xfb0
[ 1134.152925]  ? get_pid_task+0xb8/0x130
[ 1134.156812]  ? proc_fail_nth_write+0x7b/0x180
[ 1134.161288]  ? trace_hardirqs_on+0x10/0x10
[ 1134.165512]  ? fsnotify+0x974/0x11b0
[ 1134.169209]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1134.174147]  ? __handle_mm_fault+0x80f/0x4620
[ 1134.178691]  ? SyS_write+0x1b7/0x210
[ 1134.182406]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1134.187864]  do_vfs_ioctl+0x75a/0xff0
[ 1134.191659]  ? lock_acquire+0x170/0x3f0
[ 1134.195619]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1134.200014]  ? __fget+0x265/0x3e0
[ 1134.203449]  ? do_vfs_ioctl+0xff0/0xff0
[ 1134.207410]  ? security_file_ioctl+0x83/0xb0
[ 1134.211802]  SyS_ioctl+0x7f/0xb0
[ 1134.215159]  ? do_vfs_ioctl+0xff0/0xff0
[ 1134.219143]  do_syscall_64+0x1d5/0x640
[ 1134.223027]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1134.228208] RIP: 0033:0x7ff7d472f3c9
[ 1134.231916] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1134.239616] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1134.247137] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1134.254409] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1134.261664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1134.268917] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1134.276186] CPU: 0 PID: 21637 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
[ 1134.284070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1134.293679] Call Trace:
18:53:38 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 9)

[ 1134.296273]  dump_stack+0x1b2/0x281
[ 1134.299901]  should_fail.cold+0x10a/0x149
[ 1134.304044]  should_failslab+0xd6/0x130
[ 1134.308001]  kmem_cache_alloc+0x28e/0x3c0
[ 1134.312128]  __kernfs_new_node+0x6f/0x470
[ 1134.316256]  kernfs_create_dir_ns+0x8c/0x200
[ 1134.320644]  sysfs_create_dir_ns+0xb7/0x1d0
[ 1134.324946]  kobject_add_internal+0x28b/0x930
[ 1134.329437]  kobject_add+0x11f/0x180
[ 1134.333130]  ? kset_create_and_add+0x190/0x190
[ 1134.337695]  device_add+0x33f/0x15c0
[ 1134.341398]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1134.346833]  ? device_is_dependent+0x2a0/0x2a0
[ 1134.351405]  ? __kmalloc+0x3a4/0x400
[ 1134.355113]  ? input_register_device+0x419/0xa90
[ 1134.359848]  input_register_device+0x59e/0xa90
[ 1134.364413]  ? input_ff_create+0x58/0x2d0
[ 1134.368554]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1134.373734]  ? uinput_write+0xfb0/0xfb0
[ 1134.377706]  ? get_pid_task+0xb8/0x130
[ 1134.381664]  ? proc_fail_nth_write+0x7b/0x180
[ 1134.386149]  ? trace_hardirqs_on+0x10/0x10
[ 1134.390371]  ? fsnotify+0x974/0x11b0
[ 1134.394078]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1134.399272]  ? __handle_mm_fault+0x80f/0x4620
[ 1134.403746]  ? SyS_write+0x1b7/0x210
[ 1134.407542]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1134.412974]  do_vfs_ioctl+0x75a/0xff0
[ 1134.416756]  ? lock_acquire+0x170/0x3f0
[ 1134.420729]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1134.425134]  ? __fget+0x265/0x3e0
[ 1134.428569]  ? do_vfs_ioctl+0xff0/0xff0
[ 1134.432527]  ? security_file_ioctl+0x83/0xb0
[ 1134.436919]  SyS_ioctl+0x7f/0xb0
[ 1134.440274]  ? do_vfs_ioctl+0xff0/0xff0
[ 1134.444251]  do_syscall_64+0x1d5/0x640
[ 1134.448124]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1134.453294] RIP: 0033:0x7f982cb5a3c9
[ 1134.456980] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1134.464667] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1134.471912] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1134.479161] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1134.486409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
18:53:39 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x4}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

18:53:39 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x15}, 0x8)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x13e)
socketpair(0xa, 0xa, 0xec0, &(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', <r4=>r2, 0x2f, 0xff, 0x8, 0x9, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x1f, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', r4, 0x2f, 0x1, 0x7, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x0, 0x10001, 0x10001}})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x161040, 0x0)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000008c0))

[ 1134.493665] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
[ 1134.508077] kobject_add_internal failed for input12191 (error: -12 parent: input)
[ 1134.532935] FAULT_INJECTION: forcing a failure.
[ 1134.532935] name failslab, interval 1, probability 0, space 0, times 0
[ 1134.544306] CPU: 0 PID: 21648 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1134.552179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1134.561515] Call Trace:
[ 1134.564106]  dump_stack+0x1b2/0x281
[ 1134.567731]  should_fail.cold+0x10a/0x149
[ 1134.571862]  should_failslab+0xd6/0x130
[ 1134.575817]  kmem_cache_alloc+0x40/0x3c0
[ 1134.579861]  radix_tree_node_alloc.constprop.0+0x1b0/0x2f0
[ 1134.585499]  idr_get_free_cmn+0x595/0x8d0
[ 1134.589652]  idr_alloc_cmn+0xe8/0x1e0
[ 1134.593523]  ? __fprop_inc_percpu_max+0x1d0/0x1d0
[ 1134.598347]  ? lock_downgrade+0x740/0x740
[ 1134.602478]  ? fs_reclaim_release+0xd0/0x110
[ 1134.606863]  idr_alloc_cyclic+0xc2/0x1d0
[ 1134.610903]  ? idr_alloc_cmn+0x1e0/0x1e0
[ 1134.614970]  ? __radix_tree_preload+0x1c3/0x250
[ 1134.619619]  __kernfs_new_node+0xaf/0x470
[ 1134.623747]  kernfs_new_node+0x7b/0xe0
[ 1134.627612]  kernfs_create_link+0x27/0x160
[ 1134.631823]  sysfs_do_create_link_sd+0x90/0x120
[ 1134.636509]  sysfs_create_link+0x5f/0xc0
[ 1134.640652]  device_add+0x461/0x15c0
[ 1134.644342]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1134.649767]  ? device_is_dependent+0x2a0/0x2a0
[ 1134.654327]  ? __kmalloc+0x3a4/0x400
[ 1134.658016]  ? input_register_device+0x419/0xa90
[ 1134.662838]  input_register_device+0x59e/0xa90
[ 1134.667399]  ? input_ff_create+0x58/0x2d0
[ 1134.671525]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1134.676693]  ? uinput_write+0xfb0/0xfb0
[ 1134.680643]  ? get_pid_task+0xb8/0x130
[ 1134.684504]  ? proc_fail_nth_write+0x7b/0x180
[ 1134.688976]  ? trace_hardirqs_on+0x10/0x10
[ 1134.693202]  ? fsnotify+0x974/0x11b0
[ 1134.696895]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1134.701802]  ? __handle_mm_fault+0x80f/0x4620
[ 1134.706277]  ? SyS_write+0x1b7/0x210
[ 1134.709983]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1134.715412]  do_vfs_ioctl+0x75a/0xff0
[ 1134.719190]  ? lock_acquire+0x170/0x3f0
[ 1134.723145]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1134.727968]  ? __fget+0x265/0x3e0
[ 1134.731396]  ? do_vfs_ioctl+0xff0/0xff0
[ 1134.735360]  ? security_file_ioctl+0x83/0xb0
[ 1134.739808]  SyS_ioctl+0x7f/0xb0
[ 1134.743425]  ? do_vfs_ioctl+0xff0/0xff0
[ 1134.747387]  do_syscall_64+0x1d5/0x640
[ 1134.751258]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1134.756450] RIP: 0033:0x7ff7d472f3c9
[ 1134.760145] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1134.767833] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1134.775080] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1134.782338] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1134.789589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
18:53:39 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 7)

18:53:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xfffe, 0x7, 0x5, 0x5}, 'syz0\x00', 0x26})
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2d6)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) (async)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xfffe, 0x7, 0x5, 0x5}, 'syz0\x00', 0x26}) (async)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) (async)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2d6) (async)

[ 1134.796836] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1134.839365] FAULT_INJECTION: forcing a failure.
[ 1134.839365] name failslab, interval 1, probability 0, space 0, times 0
[ 1134.858678] input: syz1 as /devices/virtual/input/input12192
[ 1134.866213] input: syz1 as /devices/virtual/input/input12196
[ 1134.868813] CPU: 0 PID: 21660 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
[ 1134.879888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1134.889322] Call Trace:
[ 1134.891908]  dump_stack+0x1b2/0x281
[ 1134.895537]  should_fail.cold+0x10a/0x149
[ 1134.899684]  should_failslab+0xd6/0x130
[ 1134.903656]  kmem_cache_alloc+0x28e/0x3c0
[ 1134.907896]  __kernfs_new_node+0x6f/0x470
[ 1134.912047]  kernfs_new_node+0x7b/0xe0
[ 1134.915930]  __kernfs_create_file+0x3d/0x320
[ 1134.920345]  sysfs_add_file_mode_ns+0x1e1/0x450
[ 1134.925052]  device_create_file+0xc8/0x100
[ 1134.929284]  ? acpi_platform_notify_remove+0x1f0/0x1f0
[ 1134.934560]  device_add+0x37a/0x15c0
[ 1134.938272]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1134.943806]  ? device_is_dependent+0x2a0/0x2a0
[ 1134.948388]  ? __kmalloc+0x3a4/0x400
[ 1134.952098]  ? input_register_device+0x419/0xa90
[ 1134.956862]  input_register_device+0x59e/0xa90
[ 1134.961439]  ? input_ff_create+0x58/0x2d0
[ 1134.965589]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1134.970781]  ? uinput_write+0xfb0/0xfb0
[ 1134.974751]  ? get_pid_task+0xb8/0x130
[ 1134.978630]  ? proc_fail_nth_write+0x7b/0x180
[ 1134.983121]  ? trace_hardirqs_on+0x10/0x10
[ 1134.987359]  ? fsnotify+0x974/0x11b0
[ 1134.991067]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1134.996003]  ? __handle_mm_fault+0x80f/0x4620
[ 1135.000493]  ? SyS_write+0x1b7/0x210
[ 1135.004315]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1135.009777]  do_vfs_ioctl+0x75a/0xff0
[ 1135.013578]  ? lock_acquire+0x170/0x3f0
[ 1135.017547]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1135.021953]  ? __fget+0x265/0x3e0
[ 1135.025423]  ? do_vfs_ioctl+0xff0/0xff0
[ 1135.029419]  ? security_file_ioctl+0x83/0xb0
[ 1135.033822]  SyS_ioctl+0x7f/0xb0
[ 1135.037184]  ? do_vfs_ioctl+0xff0/0xff0
[ 1135.041155]  do_syscall_64+0x1d5/0x640
[ 1135.045045]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1135.050227] RIP: 0033:0x7f982cb5a3c9
[ 1135.053943] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1135.061642] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1135.068899] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1135.076163] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1135.083424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
18:53:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x1, 0x101})

18:53:39 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
write$input_event(r0, &(0x7f0000000000)={{}, 0x17, 0x9, 0x5}, 0x18)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x800) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

18:53:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x1, 0x101})

18:53:39 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x15}, 0x8)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x13e)
socketpair(0xa, 0xa, 0xec0, &(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', <r4=>r2, 0x2f, 0xff, 0x8, 0x9, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x1f, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', r4, 0x2f, 0x1, 0x7, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x0, 0x10001, 0x10001}})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x161040, 0x0)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000008c0))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x15}, 0x8) (async)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x13e) (async)
socketpair(0xa, 0xa, 0xec0, &(0x7f0000000600)) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r2, 0x2f, 0xff, 0x8, 0x9, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x1f, 0x2}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', r4, 0x2f, 0x1, 0x7, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x0, 0x10001, 0x10001}}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x161040, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000008c0)) (async)

18:53:39 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 8)

18:53:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x1, 0x101})

[ 1135.090696] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
18:53:39 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 10)

18:53:39 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x4})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)

[ 1135.160960] FAULT_INJECTION: forcing a failure.
[ 1135.160960] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.172442] CPU: 0 PID: 21712 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0
[ 1135.180330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1135.189678] Call Trace:
[ 1135.192268]  dump_stack+0x1b2/0x281
[ 1135.195991]  should_fail.cold+0x10a/0x149
[ 1135.200140]  should_failslab+0xd6/0x130
[ 1135.204113]  kmem_cache_alloc+0x40/0x3c0
[ 1135.208267]  radix_tree_node_alloc.constprop.0+0x1b0/0x2f0
[ 1135.213893]  idr_get_free_cmn+0x595/0x8d0
[ 1135.218049]  ? trace_hardirqs_on+0x10/0x10
[ 1135.222266]  idr_alloc_cmn+0xe8/0x1e0
[ 1135.226042]  ? __fprop_inc_percpu_max+0x1d0/0x1d0
[ 1135.230863]  ? fs_reclaim_release+0xd0/0x110
[ 1135.235247]  ? fs_reclaim_release+0xd0/0x110
[ 1135.239651]  idr_alloc_cyclic+0xc2/0x1d0
[ 1135.243692]  ? idr_alloc_cmn+0x1e0/0x1e0
[ 1135.247730]  ? __radix_tree_preload+0x1c3/0x250
[ 1135.252377]  __kernfs_new_node+0xaf/0x470
[ 1135.256501]  kernfs_create_dir_ns+0x8c/0x200
[ 1135.260886]  sysfs_create_dir_ns+0xb7/0x1d0
[ 1135.265187]  kobject_add_internal+0x28b/0x930
[ 1135.269663]  kobject_add+0x11f/0x180
[ 1135.273360]  ? kset_create_and_add+0x190/0x190
[ 1135.277929]  device_add+0x33f/0x15c0
[ 1135.281621]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1135.287048]  ? device_is_dependent+0x2a0/0x2a0
[ 1135.291607]  ? __kmalloc+0x3a4/0x400
[ 1135.295298]  ? input_register_device+0x419/0xa90
[ 1135.300033]  input_register_device+0x59e/0xa90
[ 1135.304590]  ? input_ff_create+0x58/0x2d0
[ 1135.308718]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1135.313884]  ? uinput_write+0xfb0/0xfb0
[ 1135.317831]  ? get_pid_task+0xb8/0x130
[ 1135.321694]  ? proc_fail_nth_write+0x7b/0x180
[ 1135.326189]  ? trace_hardirqs_on+0x10/0x10
[ 1135.330403]  ? fsnotify+0x974/0x11b0
[ 1135.334109]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1135.339104]  ? __handle_mm_fault+0x80f/0x4620
[ 1135.343574]  ? SyS_write+0x1b7/0x210
[ 1135.347265]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1135.352695]  do_vfs_ioctl+0x75a/0xff0
[ 1135.356497]  ? lock_acquire+0x170/0x3f0
[ 1135.360449]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1135.364833]  ? __fget+0x265/0x3e0
[ 1135.368273]  ? do_vfs_ioctl+0xff0/0xff0
[ 1135.372230]  ? security_file_ioctl+0x83/0xb0
[ 1135.376638]  SyS_ioctl+0x7f/0xb0
[ 1135.379984]  ? do_vfs_ioctl+0xff0/0xff0
[ 1135.383938]  do_syscall_64+0x1d5/0x640
[ 1135.387812]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1135.392981] RIP: 0033:0x7f982cb5a3c9
[ 1135.396680] RSP: 002b:00007f982b4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1135.404370] RAX: ffffffffffffffda RBX: 00007f982cc6cf80 RCX: 00007f982cb5a3c9
[ 1135.411638] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1135.418892] RBP: 00007f982b4cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1135.426152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1135.433407] R13: 00007ffd30bef76f R14: 00007f982b4cf300 R15: 0000000000022000
[ 1135.449157] input: syz1 as /devices/virtual/input/input12198
18:53:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)

18:53:39 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x15}, 0x8)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x13e)
socketpair(0xa, 0xa, 0xec0, &(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', <r4=>r2, 0x2f, 0xff, 0x8, 0x9, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x1f, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', r4, 0x2f, 0x1, 0x7, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x0, 0x10001, 0x10001}})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x161040, 0x0)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000008c0))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x15}, 0x8) (async)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x13e) (async)
socketpair(0xa, 0xa, 0xec0, &(0x7f0000000600)) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r2, 0x2f, 0xff, 0x8, 0x9, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x1f, 0x2}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', r4, 0x2f, 0x1, 0x7, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x0, 0x10001, 0x10001}}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x161040, 0x0) (async)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000008c0)) (async)

18:53:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000))

18:53:40 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x5, 0x1ff, 0xfffeffff], 0x4, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301180, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x5)

[ 1135.466447] FAULT_INJECTION: forcing a failure.
[ 1135.466447] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.485559] CPU: 0 PID: 21727 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1135.493458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1135.502893] Call Trace:
[ 1135.505481]  dump_stack+0x1b2/0x281
[ 1135.509114]  should_fail.cold+0x10a/0x149
18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1135.513309]  should_failslab+0xd6/0x130
[ 1135.517294]  __kmalloc_track_caller+0x2bc/0x400
[ 1135.521958]  ? kstrdup_const+0x35/0x60
[ 1135.525847]  kstrdup+0x36/0x70
[ 1135.529044]  kstrdup_const+0x35/0x60
[ 1135.532842]  __kernfs_new_node+0x2e/0x470
[ 1135.536994]  kernfs_new_node+0x7b/0xe0
[ 1135.540882]  kernfs_create_link+0x27/0x160
[ 1135.545117]  sysfs_do_create_link_sd+0x90/0x120
[ 1135.545670] input: syz1 as /devices/virtual/input/input12201
[ 1135.549782]  sysfs_create_link+0x5f/0xc0
[ 1135.549794]  device_add+0x749/0x15c0
18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r0, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1135.549808]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1135.549817]  ? device_is_dependent+0x2a0/0x2a0
[ 1135.549828]  ? __kmalloc+0x3a4/0x400
[ 1135.549840]  ? input_register_device+0x419/0xa90
[ 1135.582215]  input_register_device+0x59e/0xa90
[ 1135.586996]  ? input_ff_create+0x58/0x2d0
[ 1135.591144]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1135.596339]  ? uinput_write+0xfb0/0xfb0
[ 1135.600311]  ? get_pid_task+0xb8/0x130
[ 1135.604199]  ? proc_fail_nth_write+0x7b/0x180
[ 1135.608695]  ? trace_hardirqs_on+0x10/0x10
[ 1135.612936]  ? fsnotify+0x974/0x11b0
18:53:40 executing program 5:
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1135.616644]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1135.621564]  ? __handle_mm_fault+0x80f/0x4620
[ 1135.626054]  ? SyS_write+0x1b7/0x210
[ 1135.629805]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1135.635253]  do_vfs_ioctl+0x75a/0xff0
[ 1135.639053]  ? lock_acquire+0x170/0x3f0
[ 1135.643115]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1135.647528]  ? __fget+0x265/0x3e0
[ 1135.650981]  ? do_vfs_ioctl+0xff0/0xff0
[ 1135.654952]  ? security_file_ioctl+0x83/0xb0
[ 1135.659360]  SyS_ioctl+0x7f/0xb0
[ 1135.662732]  ? do_vfs_ioctl+0xff0/0xff0
18:53:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) (async)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000))

[ 1135.666704]  do_syscall_64+0x1d5/0x640
[ 1135.670597]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1135.675782] RIP: 0033:0x7ff7d472f3c9
[ 1135.679572] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1135.687273] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1135.694535] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1135.701797] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1135.709061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1135.716325] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
[ 1135.720118] input: syz1 as /devices/virtual/input/input12202
18:53:40 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 9)

18:53:40 executing program 5:
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02) (async)

18:53:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000))

18:53:40 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x5, 0x1ff, 0xfffeffff], 0x4, 0x800, 0x0, <r1=>0xffffffffffffffff}) (rerun: 32)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) (async)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async, rerun: 32)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301180, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x5)

18:53:40 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 11)

[ 1135.761203] input: syz1 as /devices/virtual/input/input12197
18:53:40 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffffffffffff0001, 0x0, 0x0, 0x5, 0x14, "86524aa883aab6c87e34b778325258604570ad9ddec6609974dbf1d58d1a0b25f32176f9c0bd0f46c695080fc6309ca8ec388c48fa4b875272e0042ff60b98d8", "46cfc88bea32a34094618743f280c58e724ec6e91566d4a0560ac92764a1fee0af1336873633fed8c392175b606b8c8ab3dc0a91075421cad4592a5212995d60", "f446b74b3e21ca2374f769379c20a73ecaeb099d231cee36906004b35e7d1682", [0x4, 0x40]})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000c80))
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x400000)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffffffff0000, 0x3f, 0x0, 0x6, 0x4, 0x14, "0df97b29bb675da61b0629416d0a97b669dde815d1dc46ee5df0620c680ea1e3312d90e643dcd0243cac371667e6d56849f5a122f322e6341603af9c4d172fe2", "148dfbed230a442a70d0620643959e55e2d2dc2d76867e58c7f0634b0a199491e12811fadc8f5f2b38689b3582e0b44e972ae1207bce5090253a4550dd7499b3", "7cba1da0cffb982ce251978c4cbfbdb9b77e960e5aa4ddcf1f367f7377dda335", [0x8000000000000000, 0x7fffffffffffffff]})

18:53:40 executing program 5:
write$input_event(0xffffffffffffffff, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1135.806873] FAULT_INJECTION: forcing a failure.
[ 1135.806873] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.813567] input: syz1 as /devices/virtual/input/input12204
[ 1135.844357] CPU: 0 PID: 21788 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1135.852265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1135.861634] Call Trace:
[ 1135.864218]  dump_stack+0x1b2/0x281
[ 1135.867952]  should_fail.cold+0x10a/0x149
[ 1135.872102]  should_failslab+0xd6/0x130
[ 1135.876078]  kmem_cache_alloc+0x28e/0x3c0
[ 1135.880230]  __kernfs_new_node+0x6f/0x470
[ 1135.884378]  kernfs_new_node+0x7b/0xe0
[ 1135.888262]  __kernfs_create_file+0x3d/0x320
[ 1135.892760]  sysfs_add_file_mode_ns+0x1e1/0x450
[ 1135.897433]  device_create_file+0xc8/0x100
[ 1135.901664]  ? acpi_platform_notify_remove+0x1f0/0x1f0
18:53:40 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4f})
ioctl$UI_DEV_CREATE(r0, 0x5501)

[ 1135.906931]  device_add+0x37a/0x15c0
[ 1135.910641]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1135.916087]  ? device_is_dependent+0x2a0/0x2a0
[ 1135.920765]  ? __kmalloc+0x3a4/0x400
[ 1135.924558]  ? input_register_device+0x419/0xa90
[ 1135.929320]  input_register_device+0x59e/0xa90
[ 1135.933901]  ? input_ff_create+0x58/0x2d0
[ 1135.938057]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1135.943246]  ? uinput_write+0xfb0/0xfb0
[ 1135.947223]  ? get_pid_task+0xb8/0x130
[ 1135.951205]  ? proc_fail_nth_write+0x7b/0x180
[ 1135.955693]  ? trace_hardirqs_on+0x10/0x10
[ 1135.959930]  ? fsnotify+0x974/0x11b0
[ 1135.963640]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1135.965682] input: syz1 as /devices/virtual/input/input12205
[ 1135.968594]  ? __handle_mm_fault+0x80f/0x4620
[ 1135.968606]  ? SyS_write+0x1b7/0x210
[ 1135.968621]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1135.968633]  do_vfs_ioctl+0x75a/0xff0
[ 1135.991807]  ? lock_acquire+0x170/0x3f0
[ 1135.995781]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1136.000287]  ? __fget+0x265/0x3e0
[ 1136.003736]  ? do_vfs_ioctl+0xff0/0xff0
[ 1136.007716]  ? security_file_ioctl+0x83/0xb0
[ 1136.012127]  SyS_ioctl+0x7f/0xb0
[ 1136.015497]  ? do_vfs_ioctl+0xff0/0xff0
[ 1136.019492]  do_syscall_64+0x1d5/0x640
[ 1136.023384]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1136.028582] RIP: 0033:0x7ff7d472f3c9
[ 1136.032281] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1136.039979] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1136.047354] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
18:53:40 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x5, 0x1ff, 0xfffeffff], 0x4, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00'}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [], [0x98dc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x8001, 0xdd7, 0x7b2dcdeb, 0xfba7, 0x90, 0x7, 0x5, 0x2, 0x1f, 0x1, 0x6, 0xfffff736, 0x5, 0x3ff, 0x0, 0x20, 0x4, 0x40, 0x6, 0x5, 0x0, 0x20, 0x0, 0x33bcdc15, 0xfff, 0x1, 0x1c1, 0x0, 0x1, 0xfffffc00, 0x7, 0xffff, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30, 0x100, 0xd8d, 0x9bb, 0x8001, 0x7, 0x0, 0xc73, 0x8000, 0x1000, 0xf6e3, 0x7, 0x0, 0x6, 0x2, 0x3, 0x9, 0x0, 0x2, 0x5, 0xa000000, 0x7, 0x4, 0x7, 0xff], [0x3ff, 0x0, 0xe0, 0x3f, 0x4, 0x5, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffa, 0x2, 0x906, 0x0, 0x0, 0x6, 0x3, 0x0, 0x180000, 0x2, 0xfc3, 0x8, 0x6, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x7ff, 0x0, 0x400000, 0xfffffff7, 0x1, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x4, 0x400, 0x5]}, 0x45c) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301180, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x5)

18:53:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6914e98f, 0x0, 0x0, 0x0, 0x101], [], [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

18:53:40 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) (async, rerun: 64)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4f}) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r0, 0x5501)

18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

[ 1136.054615] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1136.062061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1136.069333] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000
18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$input_event(r1, &(0x7f00000003c0)={{0x77359400}}, 0xffffffffffffff02)

18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
write$input_event(r0, &(0x7f00000003c0)={{r1, r2/1000+10000}, 0x5}, 0x18)
pselect6(0x40, &(0x7f0000000040)={0xeb, 0x7fffffff, 0x2, 0x2, 0x1596, 0x5, 0x8, 0x4}, &(0x7f00000000c0)={0x10000, 0x5, 0x4, 0xfffffffffffffffe, 0x156d454b, 0x1, 0x6}, &(0x7f0000000100)={0xccc, 0x0, 0x6fd, 0x4, 0x10001, 0x1, 0xc5e6, 0x22ce}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
clock_gettime(0x0, &(0x7f0000000200))

18:53:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
write$input_event(r0, &(0x7f00000003c0)={{r1, r2/1000+10000}, 0x5}, 0x18) (async)
pselect6(0x40, &(0x7f0000000040)={0xeb, 0x7fffffff, 0x2, 0x2, 0x1596, 0x5, 0x8, 0x4}, &(0x7f00000000c0)={0x10000, 0x5, 0x4, 0xfffffffffffffffe, 0x156d454b, 0x1, 0x6}, &(0x7f0000000100)={0xccc, 0x0, 0x6fd, 0x4, 0x10001, 0x1, 0xc5e6, 0x22ce}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
clock_gettime(0x0, &(0x7f0000000200))

18:53:40 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x4c})
ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 12)

[ 1136.107658] 
[ 1136.109050] input: syz1 as /devices/virtual/input/input12206
[ 1136.109312] ================================================
[ 1136.109315] WARNING: lock held when returning to user space!
[ 1136.109321] 4.14.292-syzkaller #0 Not tainted
[ 1136.109324] ------------------------------------------------
[ 1136.109329] syz-executor.1/21804 is leaving the kernel with locks still held!
[ 1136.109337] 1 lock held by syz-executor.1/21804:
[ 1136.148917]  #0:  (&lo->lo_ctl_mutex/1){+.+.}, at: [<ffffffff838d8187>] lo_ioctl+0x87/0x1cd0
[ 1136.169164] FAULT_INJECTION: forcing a failure.
[ 1136.169164] name failslab, interval 1, probability 0, space 0, times 0
[ 1136.188645] CPU: 0 PID: 21845 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0
[ 1136.196538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1136.205883] Call Trace:
[ 1136.208483]  dump_stack+0x1b2/0x281
[ 1136.212105]  should_fail.cold+0x10a/0x149
[ 1136.216248]  should_failslab+0xd6/0x130
[ 1136.220224]  kmem_cache_alloc+0x28e/0x3c0
[ 1136.224373]  __kernfs_new_node+0x6f/0x470
[ 1136.225899] uinput: write device info first
[ 1136.228537]  kernfs_new_node+0x7b/0xe0
[ 1136.228547]  kernfs_create_link+0x27/0x160
[ 1136.228557]  sysfs_do_create_link_sd+0x90/0x120
[ 1136.246237]  sysfs_create_link+0x5f/0xc0
[ 1136.250295]  device_add+0x461/0x15c0
[ 1136.254020]  ? check_preemption_disabled+0x35/0x240
[ 1136.259031]  ? device_is_dependent+0x2a0/0x2a0
[ 1136.263601]  ? __kmalloc+0x32d/0x400
[ 1136.267306]  ? input_register_device+0x419/0xa90
[ 1136.272056]  input_register_device+0x59e/0xa90
[ 1136.276639]  ? input_ff_create+0x58/0x2d0
[ 1136.280783]  uinput_ioctl_handler.isra.0+0x84c/0x1790
[ 1136.285967]  ? uinput_write+0xfb0/0xfb0
[ 1136.289929]  ? get_pid_task+0xb8/0x130
[ 1136.293808]  ? proc_fail_nth_write+0x7b/0x180
[ 1136.298295]  ? trace_hardirqs_on+0x10/0x10
[ 1136.302527]  ? fsnotify+0x974/0x11b0
[ 1136.306233]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1136.311177]  ? __handle_mm_fault+0x80f/0x4620
[ 1136.315666]  ? uinput_ioctl_handler.isra.0+0x1790/0x1790
[ 1136.321631]  do_vfs_ioctl+0x75a/0xff0
[ 1136.325422]  ? lock_acquire+0x170/0x3f0
[ 1136.329388]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1136.333791]  ? __fget+0x265/0x3e0
[ 1136.337237]  ? do_vfs_ioctl+0xff0/0xff0
[ 1136.341204]  ? security_file_ioctl+0x83/0xb0
[ 1136.345604]  SyS_ioctl+0x7f/0xb0
[ 1136.348959]  ? do_vfs_ioctl+0xff0/0xff0
[ 1136.352926]  do_syscall_64+0x1d5/0x640
[ 1136.356807]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1136.362082] RIP: 0033:0x7ff7d472f3c9
[ 1136.365807] RSP: 002b:00007ff7d30a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1136.373506] RAX: ffffffffffffffda RBX: 00007ff7d4841f80 RCX: 00007ff7d472f3c9
[ 1136.380766] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1136.388025] RBP: 00007ff7d30a41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1136.395285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1136.402543] R13: 00007fff50698f9f R14: 00007ff7d30a4300 R15: 0000000000022000