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", 0x12b}, {&(0x7f00000003c0)="46f3da61b00362cd724abf751d82b1d802d14741e85e4ae3813c24e9811bfd", 0x1f}, {&(0x7f0000000400)="7f6247b66cb03d525517be026dd3dc698f5217aaa7332ac06cdb3fe6b71eedbebb62a76a113aebe9d9c84593501641e9c5f244b3203d33016cc2d93ea2c6f915a3a0c440db90323dc96239d1232203f7dfc3d7638bf008e20a30931207abb48f0b29dbff0b5439c7f6e4c94f930724edf95939818c4ed26b181eeec6adca9c784fe2f51fc56bfb36906903449a7817d9633b0b7e7d14a33bb81bd26569d4", 0x9e}, {&(0x7f00000004c0)="40ca3c9e6b7e1b3d7830c2e5d67d68cf7affd1e1bc75854af230515483c4470b619bde1ded13ad95a7d1a0b0dcd80ba8581b07d9b3eec2351c91b520b0142b80d96779ae7cee1bbb78cd9aae5d57510c79cb94c23a2e1304e3f7b5e10df660ea227b3a0a617f2196f11ab0a6d58c874c7e60242209a86663747c071104c14c2c034805ad048f777dfb498b3a1aff6aa2b04cd1f4711ba01600ab5561141349bcb5596f1466738ddfb45bf50399e96ec5880349b5add5d1ee527185fc5e38bf93a36f25419cefa5b92a37b158131f6479d65cb4a51ab7721a50", 0xd9}, {&(0x7f00000005c0)="10ff1136df4b9db505997290a0a212da64c0341f158ae8268a55472ed94296b1eef80da0f4dcbc0294cd1fed7817dd76a186b950c1c59d72a56cb7288bc455d9b980cc56e817b8a42d4bcc912987d76b583b649b2e21192d4c30a9cf724389fdba3238e19c8a3ec4c4aeea0a908325d3c1a3d1c293170d01e7dce066638d8fc48ab9e8099eaeb81c1a52dd620e31a4106551b58c6d411b699a477d17c324bf6859be8faabd05b320b748a4b9fee452e210863e75c0f76857db2486f0533a3baa810dd9cb53b3ae9f67bbda1533825d2d64e55b8aa414a45396a398", 0xdb}, {&(0x7f00000006c0)="5854ec3868d00d3f70f9f3ff2be9ac54de58d8c8c711ab4e16586c5d5b80f910efcf46d1dac620406eee9103903b5fe415171df9c4037b926cdbe807063569de45d9d47a64d4e355657959c81eaa67aa66b8b4e5d7d1775868ad0b77d84f808a1e892a3192e22bc1d0f2ac6d629cf1db585cfda679268f6aa306769864ea80f034a107d18a47904ee6852882c112d3b7dd0214939574ed1a085368006606ddf6ecfa4fc27d118dcfb67980021a599726736641f38862086f907491a09dd092608628d5ad5d17284b5f087d47dc24e863", 0xd0}], 0x8) dup2(0xffffffffffffffff, r2) 16:50:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb10, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xafc, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x22, @pid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb10}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:21 executing program 2 (fault-call:3 fault-nth:7): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 939.075183] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 939.096915] input: syz1 as /devices/virtual/input/input79 [ 939.108329] input: syz1 as /devices/virtual/input/input80 16:50:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb10, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xafc, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x22, @pid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb10}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 939.326494] FAULT_INJECTION: forcing a failure. [ 939.326494] name failslab, interval 1, probability 0, space 0, times 0 [ 939.355987] CPU: 1 PID: 21590 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 939.363939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.373306] Call Trace: [ 939.375900] dump_stack+0x142/0x197 [ 939.375918] should_fail.cold+0x10f/0x159 [ 939.375932] should_failslab+0xdb/0x130 [ 939.375943] kmem_cache_alloc+0x2d7/0x780 [ 939.383736] ? vfs_write+0x25f/0x500 [ 939.383750] getname_flags+0xcb/0x580 [ 939.383761] ? check_preemption_disabled+0x3c/0x250 [ 939.383772] getname+0x1a/0x20 [ 939.383783] do_sys_open+0x1e7/0x430 [ 939.383795] ? filp_open+0x70/0x70 [ 939.383803] ? fput+0xd4/0x150 [ 939.383813] ? SyS_pwrite64+0xca/0x140 [ 939.383826] SyS_open+0x2d/0x40 [ 939.383833] ? do_sys_open+0x430/0x430 [ 939.383843] do_syscall_64+0x1e8/0x640 [ 939.383851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 939.383867] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 939.383874] RIP: 0033:0x414491 [ 939.383880] RSP: 002b:00007f22ada84a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 939.383890] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 0000000000414491 [ 939.383895] RDX: 00007f22ada84b0a RSI: 0000000000000002 RDI: 00007f22ada84b00 [ 939.383903] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 939.475423] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 939.482675] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 16:50:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r2, r1) 16:50:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)="7be6fbe64cb06d3e68c6b0ffa6b247b1bd9fde6145da768ff13970ddb56dcd05fccd2ed9ff872021b4b61da2e55dad081d7a339c2b77df1641884a9096a460cd10d2ea3f84cb51b5e1520ba0a35759ec8b17858103bff5acbb0148e20e194f0a4a68ef95ff1f89c7e2e7192383749743a0fc05edac074dd3e267febfbace0dda358a4bf1e650bd1f8a0a02405e5fe684332a60c5f5e2", 0x96}, {&(0x7f00000001c0)="1ad013538b72e9473faccfed2e3243e24707d569c3c6a36f5bfd4de41db0a9da737d37201b4b55f9965261f22ef6203e1ab0da3a2bfe5c3de5ba5b9ced9c8153c46e6a380a199f6ae3bed860a0b92482985e5b1d5d18da3a51ab169b9f59cc312f8ad82d9daefffedd6b9df728101f64490f96ed6fc274f5ed035d5c4dbd8e6d4b5462e07de4f5ea2a8a5fe1b52c27e30fcdc3fd07d2f0672a6145365ade48981bc4f72274b0e4638575d2459fb0890e4b2b3a15bb9bc4ab4dde10fe9cd720061e460c73b0e9cb32d8a50e6239535ae0388b7cf8ed48e5f26433794ba02487842413b7f697", 0xe5}, {&(0x7f0000000a00)="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", 0x12b}, {&(0x7f00000003c0)="46f3da61b00362cd724abf751d82b1d802d14741e85e4ae3813c24e9811bfd", 0x1f}, {&(0x7f0000000400)="7f6247b66cb03d525517be026dd3dc698f5217aaa7332ac06cdb3fe6b71eedbebb62a76a113aebe9d9c84593501641e9c5f244b3203d33016cc2d93ea2c6f915a3a0c440db90323dc96239d1232203f7dfc3d7638bf008e20a30931207abb48f0b29dbff0b5439c7f6e4c94f930724edf95939818c4ed26b181eeec6adca9c784fe2f51fc56bfb36906903449a7817d9633b0b7e7d14a33bb81bd26569d4", 0x9e}, {&(0x7f00000004c0)="40ca3c9e6b7e1b3d7830c2e5d67d68cf7affd1e1bc75854af230515483c4470b619bde1ded13ad95a7d1a0b0dcd80ba8581b07d9b3eec2351c91b520b0142b80d96779ae7cee1bbb78cd9aae5d57510c79cb94c23a2e1304e3f7b5e10df660ea227b3a0a617f2196f11ab0a6d58c874c7e60242209a86663747c071104c14c2c034805ad048f777dfb498b3a1aff6aa2b04cd1f4711ba01600ab5561141349bcb5596f1466738ddfb45bf50399e96ec5880349b5add5d1ee527185fc5e38bf93a36f25419cefa5b92a37b158131f6479d65cb4a51ab7721a50", 0xd9}, {&(0x7f00000005c0)="10ff1136df4b9db505997290a0a212da64c0341f158ae8268a55472ed94296b1eef80da0f4dcbc0294cd1fed7817dd76a186b950c1c59d72a56cb7288bc455d9b980cc56e817b8a42d4bcc912987d76b583b649b2e21192d4c30a9cf724389fdba3238e19c8a3ec4c4aeea0a908325d3c1a3d1c293170d01e7dce066638d8fc48ab9e8099eaeb81c1a52dd620e31a4106551b58c6d411b699a477d17c324bf6859be8faabd05b320b748a4b9fee452e210863e75c0f76857db2486f0533a3baa810dd9cb53b3ae9f67bbda1533825d2d64e55b8aa414a45396a398", 0xdb}, {&(0x7f00000006c0)="5854ec3868d00d3f70f9f3ff2be9ac54de58d8c8c711ab4e16586c5d5b80f910efcf46d1dac620406eee9103903b5fe415171df9c4037b926cdbe807063569de45d9d47a64d4e355657959c81eaa67aa66b8b4e5d7d1775868ad0b77d84f808a1e892a3192e22bc1d0f2ac6d629cf1db585cfda679268f6aa306769864ea80f034a107d18a47904ee6852882c112d3b7dd0214939574ed1a085368006606ddf6ecfa4fc27d118dcfb67980021a599726736641f38862086f907491a09dd092608628d5ad5d17284b5f087d47dc24e863", 0xd0}], 0x8) dup2(0xffffffffffffffff, r2) 16:50:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) 16:50:21 executing program 2 (fault-call:3 fault-nth:8): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb10, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xafc, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb10}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 939.601091] input: syz1 as /devices/virtual/input/input82 [ 939.663940] input: syz1 as /devices/virtual/input/input83 16:50:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 939.738946] input: syz1 as /devices/virtual/input/input84 [ 939.744265] FAULT_INJECTION: forcing a failure. [ 939.744265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 939.756362] CPU: 1 PID: 21615 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 939.764249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.773607] Call Trace: [ 939.773622] dump_stack+0x142/0x197 [ 939.773637] should_fail.cold+0x10f/0x159 [ 939.773651] __alloc_pages_nodemask+0x1d6/0x7a0 [ 939.773660] ? fs_reclaim_acquire+0x20/0x20 [ 939.773670] ? __alloc_pages_slowpath+0x2930/0x2930 [ 939.773693] cache_grow_begin+0x80/0x400 [ 939.779888] kmem_cache_alloc+0x6a6/0x780 [ 939.806173] ? vfs_write+0x25f/0x500 [ 939.806190] getname_flags+0xcb/0x580 [ 939.813672] ? check_preemption_disabled+0x3c/0x250 [ 939.813682] getname+0x1a/0x20 [ 939.813692] do_sys_open+0x1e7/0x430 [ 939.813704] ? filp_open+0x70/0x70 [ 939.813711] ? fput+0xd4/0x150 [ 939.813719] ? SyS_pwrite64+0xca/0x140 [ 939.813731] SyS_open+0x2d/0x40 16:50:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 939.813739] ? do_sys_open+0x430/0x430 [ 939.813752] do_syscall_64+0x1e8/0x640 [ 939.843415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 939.852137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 939.852145] RIP: 0033:0x414491 [ 939.852149] RSP: 002b:00007f22ada84a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 939.852159] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 0000000000414491 [ 939.852164] RDX: 00007f22ada84b0a RSI: 0000000000000002 RDI: 00007f22ada84b00 [ 939.852169] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 939.852173] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 939.852177] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 16:50:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x20a, 0xcd, 0x0, 0x20, 0x3, @broadcast}, 0x10) dup2(r2, r1) 16:50:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb10, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xafc, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb10}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 939.943423] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 939.979309] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 940.013108] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 940.023593] input: syz1 as /devices/virtual/input/input85 [ 940.068381] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)="7be6fbe64cb06d3e68c6b0ffa6b247b1bd9fde6145da768ff13970ddb56dcd05fccd2ed9ff872021b4b61da2e55dad081d7a339c2b77df1641884a9096a460cd10d2ea3f84cb51b5e1520ba0a35759ec8b17858103bff5acbb0148e20e194f0a4a68ef95ff1f89c7e2e7192383749743a0fc05edac074dd3e267febfbace0dda358a4bf1e650bd1f8a0a02405e5fe684332a60c5f5e2", 0x96}, {&(0x7f00000001c0)="1ad013538b72e9473faccfed2e3243e24707d569c3c6a36f5bfd4de41db0a9da737d37201b4b55f9965261f22ef6203e1ab0da3a2bfe5c3de5ba5b9ced9c8153c46e6a380a199f6ae3bed860a0b92482985e5b1d5d18da3a51ab169b9f59cc312f8ad82d9daefffedd6b9df728101f64490f96ed6fc274f5ed035d5c4dbd8e6d4b5462e07de4f5ea2a8a5fe1b52c27e30fcdc3fd07d2f0672a6145365ade48981bc4f72274b0e4638575d2459fb0890e4b2b3a15bb9bc4ab4dde10fe9cd720061e460c73b0e9cb32d8a50e6239535ae0388b7cf8ed48e5f26433794ba02487842413b7f697", 0xe5}, {&(0x7f0000000a00)="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", 0x12b}, {&(0x7f00000003c0)="46f3da61b00362cd724abf751d82b1d802d14741e85e4ae3813c24e9811bfd", 0x1f}, {&(0x7f0000000400)="7f6247b66cb03d525517be026dd3dc698f5217aaa7332ac06cdb3fe6b71eedbebb62a76a113aebe9d9c84593501641e9c5f244b3203d33016cc2d93ea2c6f915a3a0c440db90323dc96239d1232203f7dfc3d7638bf008e20a30931207abb48f0b29dbff0b5439c7f6e4c94f930724edf95939818c4ed26b181eeec6adca9c784fe2f51fc56bfb36906903449a7817d9633b0b7e7d14a33bb81bd26569d4", 0x9e}, {&(0x7f00000004c0)="40ca3c9e6b7e1b3d7830c2e5d67d68cf7affd1e1bc75854af230515483c4470b619bde1ded13ad95a7d1a0b0dcd80ba8581b07d9b3eec2351c91b520b0142b80d96779ae7cee1bbb78cd9aae5d57510c79cb94c23a2e1304e3f7b5e10df660ea227b3a0a617f2196f11ab0a6d58c874c7e60242209a86663747c071104c14c2c034805ad048f777dfb498b3a1aff6aa2b04cd1f4711ba01600ab5561141349bcb5596f1466738ddfb45bf50399e96ec5880349b5add5d1ee527185fc5e38bf93a36f25419cefa5b92a37b158131f6479d65cb4a51ab7721a50", 0xd9}, {&(0x7f00000005c0)="10ff1136df4b9db505997290a0a212da64c0341f158ae8268a55472ed94296b1eef80da0f4dcbc0294cd1fed7817dd76a186b950c1c59d72a56cb7288bc455d9b980cc56e817b8a42d4bcc912987d76b583b649b2e21192d4c30a9cf724389fdba3238e19c8a3ec4c4aeea0a908325d3c1a3d1c293170d01e7dce066638d8fc48ab9e8099eaeb81c1a52dd620e31a4106551b58c6d411b699a477d17c324bf6859be8faabd05b320b748a4b9fee452e210863e75c0f76857db2486f0533a3baa810dd9cb53b3ae9f67bbda1533825d2d64e55b8aa414a45396a398", 0xdb}, {&(0x7f00000006c0)="5854ec3868d00d3f70f9f3ff2be9ac54de58d8c8c711ab4e16586c5d5b80f910efcf46d1dac620406eee9103903b5fe415171df9c4037b926cdbe807063569de45d9d47a64d4e355657959c81eaa67aa66b8b4e5d7d1775868ad0b77d84f808a1e892a3192e22bc1d0f2ac6d629cf1db585cfda679268f6aa306769864ea80f034a107d18a47904ee6852882c112d3b7dd0214939574ed1a085368006606ddf6ecfa4fc27d118dcfb67980021a599726736641f38862086f907491a09dd092608628d5ad5d17284b5f087d47dc24e863", 0xd0}], 0x8) dup2(0xffffffffffffffff, r2) [ 940.137655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:22 executing program 2 (fault-call:3 fault-nth:9): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb10, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xafc, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb10}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 940.275692] input: syz1 as /devices/virtual/input/input87 [ 940.476063] FAULT_INJECTION: forcing a failure. [ 940.476063] name failslab, interval 1, probability 0, space 0, times 0 [ 940.506380] CPU: 1 PID: 21679 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 940.514326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.523746] Call Trace: [ 940.526318] dump_stack+0x142/0x197 [ 940.529930] should_fail.cold+0x10f/0x159 [ 940.534067] should_failslab+0xdb/0x130 [ 940.538026] kmem_cache_alloc+0x2d7/0x780 [ 940.542201] ? save_stack+0xa9/0xd0 [ 940.545936] get_empty_filp+0x8c/0x3f0 [ 940.549817] path_openat+0x8f/0x3f70 [ 940.553565] ? trace_hardirqs_on+0x10/0x10 [ 940.557782] ? check_preemption_disabled+0x3c/0x250 [ 940.562799] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 940.567449] ? find_held_lock+0x35/0x130 [ 940.571508] ? save_trace+0x290/0x290 [ 940.575350] ? __alloc_fd+0x1d4/0x4a0 [ 940.579135] do_filp_open+0x18e/0x250 [ 940.582919] ? may_open_dev+0xe0/0xe0 [ 940.586705] ? lock_downgrade+0x740/0x740 [ 940.590843] ? do_raw_spin_unlock+0x16b/0x260 [ 940.595373] ? _raw_spin_unlock+0x2d/0x50 [ 940.599507] ? __alloc_fd+0x1d4/0x4a0 [ 940.603295] do_sys_open+0x2c5/0x430 [ 940.606991] ? filp_open+0x70/0x70 [ 940.610516] ? fput+0xd4/0x150 [ 940.613700] ? SyS_pwrite64+0xca/0x140 [ 940.617589] SyS_open+0x2d/0x40 [ 940.620855] ? do_sys_open+0x430/0x430 [ 940.624733] do_syscall_64+0x1e8/0x640 [ 940.628602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 940.633432] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 940.638628] RIP: 0033:0x414491 [ 940.641809] RSP: 002b:00007f22ada84a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 940.649511] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 0000000000414491 [ 940.656777] RDX: 00007f22ada84b0a RSI: 0000000000000002 RDI: 00007f22ada84b00 [ 940.664032] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 940.671293] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 940.678556] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 16:50:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x402000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000003c0)={@ipx={0x4, 0x0, 0x4d, "1bffdae9b868", 0x7}, {&(0x7f00000001c0)=""/99, 0x63}, &(0x7f0000000140), 0x5e}, 0xa0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0xa200, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000300)={0x0, 0xe, 0x2, 0xab9, 0x26, 0x0, &(0x7f0000000280)="39763c540be7a5e4e470665d418c9a0307e31bbe9c2fe375d75132d1457aab0620a4b21979c4"}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r7, r2) 16:50:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) 16:50:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 16:50:22 executing program 2 (fault-call:3 fault-nth:10): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 940.774009] input: syz1 as /devices/virtual/input/input88 [ 940.791585] input: syz1 as /devices/virtual/input/input89 16:50:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 16:50:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 940.919033] FAULT_INJECTION: forcing a failure. [ 940.919033] name failslab, interval 1, probability 0, space 0, times 0 [ 940.957777] input: syz1 as /devices/virtual/input/input90 [ 940.974139] CPU: 0 PID: 21702 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 940.982078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.991440] Call Trace: [ 940.994031] dump_stack+0x142/0x197 [ 940.994050] should_fail.cold+0x10f/0x159 [ 940.994067] should_failslab+0xdb/0x130 [ 940.994076] kmem_cache_alloc+0x2d7/0x780 [ 940.994090] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 941.005840] ? check_preemption_disabled+0x3c/0x250 [ 941.005859] selinux_file_alloc_security+0xb4/0x190 [ 941.005871] security_file_alloc+0x6d/0xa0 [ 941.005883] get_empty_filp+0x162/0x3f0 [ 941.005895] path_openat+0x8f/0x3f70 [ 941.025521] ? trace_hardirqs_on+0x10/0x10 [ 941.025537] ? check_preemption_disabled+0x3c/0x250 [ 941.025556] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 941.025563] ? find_held_lock+0x35/0x130 [ 941.025576] ? save_trace+0x290/0x290 [ 941.037480] ? __alloc_fd+0x1d4/0x4a0 [ 941.037497] do_filp_open+0x18e/0x250 [ 941.037508] ? may_open_dev+0xe0/0xe0 [ 941.037524] ? lock_downgrade+0x740/0x740 [ 941.037537] ? do_raw_spin_unlock+0x16b/0x260 [ 941.050148] input: syz1 as /devices/virtual/input/input91 [ 941.051437] ? _raw_spin_unlock+0x2d/0x50 [ 941.051451] ? __alloc_fd+0x1d4/0x4a0 [ 941.051475] do_sys_open+0x2c5/0x430 [ 941.051487] ? filp_open+0x70/0x70 [ 941.051497] ? fput+0xd4/0x150 [ 941.059439] ? SyS_pwrite64+0xca/0x140 [ 941.059457] SyS_open+0x2d/0x40 [ 941.059467] ? do_sys_open+0x430/0x430 [ 941.059480] do_syscall_64+0x1e8/0x640 [ 941.059490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 941.059506] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.059517] RIP: 0033:0x414491 [ 941.059521] RSP: 002b:00007f22ada63a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 941.059529] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 0000000000414491 [ 941.059534] RDX: 00007f22ada63b0a RSI: 0000000000000002 RDI: 00007f22ada63b00 [ 941.059538] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 941.059542] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 16:50:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 941.059546] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000005 16:50:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000040)={0x5ca3befd}) dup2(r2, r1) 16:50:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 16:50:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 941.318025] input: syz1 as /devices/virtual/input/input92 [ 941.351207] input: syz1 as /devices/virtual/input/input93 16:50:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@generic="0180683932", @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) [ 941.517556] input: syz1 as /devices/virtual/input/input94 [ 941.600129] net_ratelimit: 18 callbacks suppressed [ 941.600134] protocol 88fb is buggy, dev hsr_slave_0 [ 941.610263] protocol 88fb is buggy, dev hsr_slave_1 16:50:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@generic="0180683932", @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:23 executing program 2 (fault-call:3 fault-nth:11): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) 16:50:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 16:50:23 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x1, 0x52, &(0x7f00000003c0)="ce3415051f853c75234fa9018f60ccfee872ee95ab743bb8deabbb1e5a41cb1580ff509d60741a7b712d86642043e76b05436f6afb7fe2b59847713b92bd3622a5ddbf572a851ca83b548289be8ddf8803ed", 0x7, 0x1, 0xffff, 0x800, 0x4, 0x3, 0x3, 'syz0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) sendto$rose(r0, &(0x7f00000000c0)="2d01b90a711310072f4fffa360495aa9ae72b3244ba238f866fafe37329846d96019f7bf97ebcea48bb3c2afb46a660907e790be91b2a1c94d3ae07d1d073aa7f9198a32420342785baa216ad4e04b51afb4073504f9078005ac266cd001407b6ceb4d2d4b0a0334e8a373cbd08c617e7be623b210577325ca84a1", 0x7b, 0x80, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r4, r3) [ 941.680152] protocol 88fb is buggy, dev hsr_slave_0 [ 941.685367] protocol 88fb is buggy, dev hsr_slave_1 16:50:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) 16:50:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 941.813679] input: syz1 as /devices/virtual/input/input97 [ 941.840121] protocol 88fb is buggy, dev hsr_slave_0 [ 941.845398] protocol 88fb is buggy, dev hsr_slave_1 [ 941.903281] FAULT_INJECTION: forcing a failure. [ 941.903281] name failslab, interval 1, probability 0, space 0, times 0 [ 941.915103] CPU: 0 PID: 21780 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 941.923013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.932375] Call Trace: [ 941.934969] dump_stack+0x142/0x197 [ 941.938604] should_fail.cold+0x10f/0x159 [ 941.942759] should_failslab+0xdb/0x130 [ 941.946723] kmem_cache_alloc_trace+0x2e9/0x790 [ 941.946735] ? __lockdep_init_map+0x10c/0x570 [ 941.946750] ? loop_get_status64+0x120/0x120 [ 941.960299] __kthread_create_on_node+0xe3/0x3e0 [ 941.965066] ? kthread_park+0x140/0x140 [ 941.969052] ? __fget+0x210/0x370 [ 941.972518] ? loop_get_status64+0x120/0x120 [ 941.976928] kthread_create_on_node+0xa8/0xd0 [ 941.976938] ? __kthread_create_on_node+0x3e0/0x3e0 [ 941.976952] ? __lockdep_init_map+0x10c/0x570 [ 941.986447] lo_ioctl+0xcf7/0x1ce0 [ 941.986458] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 941.986470] ? loop_probe+0x160/0x160 [ 942.003288] blkdev_ioctl+0x96b/0x1860 [ 942.007189] ? blkpg_ioctl+0x980/0x980 [ 942.011097] ? __might_sleep+0x93/0xb0 [ 942.014990] ? __fget+0x210/0x370 [ 942.018454] block_ioctl+0xde/0x120 [ 942.022093] ? blkdev_fallocate+0x3b0/0x3b0 [ 942.026418] do_vfs_ioctl+0x7ae/0x1060 [ 942.030318] ? selinux_file_mprotect+0x5d0/0x5d0 [ 942.035077] ? lock_downgrade+0x740/0x740 [ 942.039226] ? ioctl_preallocate+0x1c0/0x1c0 [ 942.043634] ? __fget+0x237/0x370 [ 942.047094] ? security_file_ioctl+0x89/0xb0 [ 942.051507] SyS_ioctl+0x8f/0xc0 [ 942.054870] ? do_vfs_ioctl+0x1060/0x1060 [ 942.059021] do_syscall_64+0x1e8/0x640 [ 942.062910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.067762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 942.072945] RIP: 0033:0x45a567 [ 942.076131] RSP: 002b:00007f22ada63a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.083901] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 942.091182] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 16:50:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@generic="0180683932", @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 942.098459] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 942.105733] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 942.113114] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000005 16:50:24 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) 16:50:24 executing program 2 (fault-call:3 fault-nth:12): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x20a}) ioctl$UI_DEV_CREATE(r0, 0x5501) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+30000}}) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r4, r3) 16:50:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) [ 942.252390] input input99: cannot allocate more than FF_MAX_EFFECTS effects 16:50:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16:50:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 942.320144] protocol 88fb is buggy, dev hsr_slave_0 [ 942.325274] protocol 88fb is buggy, dev hsr_slave_1 [ 942.356732] input input100: cannot allocate more than FF_MAX_EFFECTS effects 16:50:24 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) [ 942.402466] FAULT_INJECTION: forcing a failure. [ 942.402466] name failslab, interval 1, probability 0, space 0, times 0 [ 942.449569] CPU: 0 PID: 21818 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 942.457539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.466887] Call Trace: [ 942.469470] dump_stack+0x142/0x197 [ 942.473086] should_fail.cold+0x10f/0x159 [ 942.477217] should_failslab+0xdb/0x130 [ 942.481173] kmem_cache_alloc+0x2d7/0x780 [ 942.485311] ? trace_hardirqs_on+0x10/0x10 [ 942.489532] ? save_trace+0x290/0x290 [ 942.493323] __kernfs_new_node+0x70/0x420 [ 942.497457] kernfs_new_node+0x80/0xf0 [ 942.501332] kernfs_create_dir_ns+0x41/0x140 [ 942.505745] internal_create_group+0xea/0x7b0 [ 942.510229] sysfs_create_group+0x20/0x30 [ 942.514359] lo_ioctl+0x1176/0x1ce0 [ 942.517973] ? loop_probe+0x160/0x160 [ 942.521786] blkdev_ioctl+0x96b/0x1860 [ 942.525655] ? blkpg_ioctl+0x980/0x980 [ 942.529528] ? __might_sleep+0x93/0xb0 [ 942.533410] ? __fget+0x210/0x370 [ 942.536848] block_ioctl+0xde/0x120 [ 942.540455] ? blkdev_fallocate+0x3b0/0x3b0 [ 942.544756] do_vfs_ioctl+0x7ae/0x1060 [ 942.548626] ? selinux_file_mprotect+0x5d0/0x5d0 [ 942.553366] ? lock_downgrade+0x740/0x740 [ 942.557493] ? ioctl_preallocate+0x1c0/0x1c0 [ 942.561884] ? __fget+0x237/0x370 [ 942.565327] ? security_file_ioctl+0x89/0xb0 [ 942.569719] SyS_ioctl+0x8f/0xc0 [ 942.573070] ? do_vfs_ioctl+0x1060/0x1060 [ 942.577199] do_syscall_64+0x1e8/0x640 [ 942.581072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.585899] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 942.591243] RIP: 0033:0x45a567 16:50:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16:50:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x800}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x210280) r3 = syz_init_net_socket$llc(0x1a, 0x4, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r5}], 0x1, 0x4) fsetxattr$smack_xattr_label(r3, &(0x7f00000004c0)='security.SMACK64\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="5cff8ae53a1ae186e7ea041259b29bb70d3c83089a2d4b45c6ac5e8468de2024241493eaa2ffaebe8dbb1edc60a449f06fc40b02c80cbb8e907f1ea3e017cb4436fc92b7"], 0x6, 0x92544257d0d78ddc) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f00000000c0)=0x0) ptrace$peeksig(0x4209, r10, &(0x7f0000000100)={0x2, 0x0, 0x3}, &(0x7f00000001c0)=[{}, {}, {}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000440)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f00000003c0)={0x0, @vsock={0x28, 0x0, 0x2711}, @ax25={0x3, @bcast, 0x7}, @hci={0x1f, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x9, 0x9b89}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r12, r2) [ 942.594426] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.602127] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 942.609379] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 [ 942.616642] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 942.623896] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 942.631171] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 942.638719] protocol 88fb is buggy, dev hsr_slave_0 [ 942.643839] protocol 88fb is buggy, dev hsr_slave_1 16:50:24 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) 16:50:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 942.716696] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 942.726988] input: syz1 as /devices/virtual/input/input101 [ 942.769169] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:50:25 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 942.810870] input: syz1 as /devices/virtual/input/input102 [ 942.849660] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:50:25 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 942.911620] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 943.003801] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:25 executing program 2 (fault-call:3 fault-nth:13): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) [ 943.096251] input: syz1 as /devices/virtual/input/input103 [ 943.226467] FAULT_INJECTION: forcing a failure. [ 943.226467] name failslab, interval 1, probability 0, space 0, times 0 [ 943.238076] CPU: 0 PID: 21889 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 943.245992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.255345] Call Trace: [ 943.257929] dump_stack+0x142/0x197 [ 943.261558] should_fail.cold+0x10f/0x159 [ 943.265695] should_failslab+0xdb/0x130 [ 943.269651] kmem_cache_alloc+0x2d7/0x780 [ 943.273781] ? wait_for_completion+0x420/0x420 [ 943.278351] __kernfs_new_node+0x70/0x420 [ 943.282482] kernfs_new_node+0x80/0xf0 [ 943.286372] __kernfs_create_file+0x46/0x323 [ 943.290764] sysfs_add_file_mode_ns+0x1e4/0x450 [ 943.295417] internal_create_group+0x232/0x7b0 [ 943.299988] sysfs_create_group+0x20/0x30 [ 943.304119] lo_ioctl+0x1176/0x1ce0 [ 943.307728] ? loop_probe+0x160/0x160 [ 943.311510] blkdev_ioctl+0x96b/0x1860 [ 943.315380] ? blkpg_ioctl+0x980/0x980 [ 943.319252] ? __might_sleep+0x93/0xb0 [ 943.323121] ? __fget+0x210/0x370 [ 943.326559] block_ioctl+0xde/0x120 [ 943.330168] ? blkdev_fallocate+0x3b0/0x3b0 [ 943.334473] do_vfs_ioctl+0x7ae/0x1060 [ 943.338342] ? selinux_file_mprotect+0x5d0/0x5d0 [ 943.343078] ? lock_downgrade+0x740/0x740 [ 943.347209] ? ioctl_preallocate+0x1c0/0x1c0 [ 943.351600] ? __fget+0x237/0x370 [ 943.355038] ? security_file_ioctl+0x89/0xb0 [ 943.360470] SyS_ioctl+0x8f/0xc0 [ 943.363817] ? do_vfs_ioctl+0x1060/0x1060 [ 943.367951] do_syscall_64+0x1e8/0x640 [ 943.371819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 943.376647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 943.381818] RIP: 0033:0x45a567 [ 943.384988] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.392687] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 943.399966] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 943.407250] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 943.414523] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 16:50:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 16:50:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:25 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:50:25 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 943.421783] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 943.437531] input: syz1 as /devices/virtual/input/input104 [ 943.445472] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 943.460681] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 943.506499] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:50:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8, 0xa, r13}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r13], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newlink={0x30, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x14962, 0x204b0}, [@IFLA_EVENT={0x0, 0x2c, 0xd6}, @IFLA_NUM_RX_QUEUES={0xfffffffffffffea7, 0x20, 0xfff}]}, 0x30}}, 0x20000020) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r4}, 0x14) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r14, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r14, 0x5501) r15 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r16, r15) 16:50:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@generic, @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 943.597754] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:25 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:25 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 943.641562] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:25 executing program 2 (fault-call:3 fault-nth:14): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 943.733492] bridge32: port 1(syz_tun) entered blocking state 16:50:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@generic, @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:26 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 943.784073] bridge32: port 1(syz_tun) entered disabled state [ 943.799537] device syz_tun entered promiscuous mode [ 943.812883] bridge32: port 2(bridge_slave_0) entered blocking state [ 943.826151] bridge32: port 2(bridge_slave_0) entered disabled state [ 943.855836] device bridge_slave_0 entered promiscuous mode [ 943.897224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 943.909212] FAULT_INJECTION: forcing a failure. [ 943.909212] name failslab, interval 1, probability 0, space 0, times 0 [ 943.916056] device bridge_slave_0 left promiscuous mode [ 943.930398] input: syz1 as /devices/virtual/input/input105 [ 943.972293] bridge32: port 2(bridge_slave_0) entered disabled state [ 944.002190] CPU: 0 PID: 21943 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 944.010139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.019531] Call Trace: [ 944.022132] dump_stack+0x142/0x197 [ 944.025780] should_fail.cold+0x10f/0x159 [ 944.029956] should_failslab+0xdb/0x130 [ 944.033937] kmem_cache_alloc+0x2d7/0x780 [ 944.038092] ? wait_for_completion+0x420/0x420 [ 944.042675] __kernfs_new_node+0x70/0x420 [ 944.042688] kernfs_new_node+0x80/0xf0 [ 944.042699] __kernfs_create_file+0x46/0x323 [ 944.042710] sysfs_add_file_mode_ns+0x1e4/0x450 [ 944.042723] internal_create_group+0x232/0x7b0 [ 944.042737] sysfs_create_group+0x20/0x30 [ 944.050746] lo_ioctl+0x1176/0x1ce0 [ 944.050761] ? loop_probe+0x160/0x160 [ 944.050774] blkdev_ioctl+0x96b/0x1860 [ 944.050784] ? blkpg_ioctl+0x980/0x980 [ 944.050800] ? __might_sleep+0x93/0xb0 [ 944.050811] ? __fget+0x210/0x370 [ 944.050823] block_ioctl+0xde/0x120 [ 944.050831] ? blkdev_fallocate+0x3b0/0x3b0 [ 944.050841] do_vfs_ioctl+0x7ae/0x1060 [ 944.050851] ? selinux_file_mprotect+0x5d0/0x5d0 [ 944.050863] ? lock_downgrade+0x740/0x740 [ 944.112488] ? ioctl_preallocate+0x1c0/0x1c0 [ 944.116906] ? __fget+0x237/0x370 [ 944.120352] ? security_file_ioctl+0x89/0xb0 [ 944.124750] SyS_ioctl+0x8f/0xc0 [ 944.128112] ? do_vfs_ioctl+0x1060/0x1060 [ 944.132270] do_syscall_64+0x1e8/0x640 [ 944.136152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 944.140992] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 944.146246] RIP: 0033:0x45a567 [ 944.149426] RSP: 002b:00007f22ada63a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.157115] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 944.164368] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 944.171622] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 944.178873] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 944.186124] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000005 [ 944.207661] device syz_tun left promiscuous mode [ 944.213461] bridge32: port 1(syz_tun) entered disabled state 16:50:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 16:50:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb00, 0x0, [@generic, @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:26 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 944.223448] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 944.282428] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 944.296068] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 944.307710] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="018068", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 944.328569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 944.500928] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 16:50:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x2, 0x0, 0x9}, 'syz1\x00\x00\x00\x00\x00\x00\x00\xa9S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) 16:50:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:26 executing program 2 (fault-call:3 fault-nth:15): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:26 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="018068", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) 16:50:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 16:50:26 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 944.768786] input: syz1 as /devices/virtual/input/input108 [ 944.788104] FAULT_INJECTION: forcing a failure. [ 944.788104] name failslab, interval 1, probability 0, space 0, times 0 [ 944.800663] CPU: 1 PID: 22010 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 944.808570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.817930] Call Trace: [ 944.820522] dump_stack+0x142/0x197 [ 944.824148] should_fail.cold+0x10f/0x159 [ 944.828296] should_failslab+0xdb/0x130 [ 944.832277] kmem_cache_alloc+0x2d7/0x780 [ 944.836425] ? wait_for_completion+0x420/0x420 [ 944.841014] __kernfs_new_node+0x70/0x420 [ 944.845163] kernfs_new_node+0x80/0xf0 [ 944.849053] __kernfs_create_file+0x46/0x323 [ 944.853463] sysfs_add_file_mode_ns+0x1e4/0x450 [ 944.858135] internal_create_group+0x232/0x7b0 [ 944.862722] sysfs_create_group+0x20/0x30 [ 944.866881] lo_ioctl+0x1176/0x1ce0 [ 944.870517] ? loop_probe+0x160/0x160 [ 944.874313] blkdev_ioctl+0x96b/0x1860 [ 944.878183] ? blkpg_ioctl+0x980/0x980 [ 944.882059] ? __might_sleep+0x93/0xb0 [ 944.885936] ? __fget+0x210/0x370 [ 944.889374] block_ioctl+0xde/0x120 [ 944.892984] ? blkdev_fallocate+0x3b0/0x3b0 [ 944.897288] do_vfs_ioctl+0x7ae/0x1060 [ 944.901160] ? selinux_file_mprotect+0x5d0/0x5d0 [ 944.905896] ? lock_downgrade+0x740/0x740 [ 944.910108] ? ioctl_preallocate+0x1c0/0x1c0 [ 944.914539] ? __fget+0x237/0x370 [ 944.917994] ? security_file_ioctl+0x89/0xb0 [ 944.922393] SyS_ioctl+0x8f/0xc0 [ 944.925746] ? do_vfs_ioctl+0x1060/0x1060 [ 944.929879] do_syscall_64+0x1e8/0x640 [ 944.933763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 944.938592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 944.943764] RIP: 0033:0x45a567 [ 944.946937] RSP: 002b:00007f22ada63a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.954626] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 944.961881] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000007 16:50:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="018068", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 944.969133] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 944.976395] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 944.983649] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000004 16:50:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:50:27 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="01806839", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 945.100861] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 945.133595] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 945.195998] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 945.268694] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:27 executing program 2 (fault-call:3 fault-nth:16): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x7, 0x7f}, {0x3f, 0x80}, 0x5, 0xcdbf7f6f7ad0fb7e, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) 16:50:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:50:27 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="01806839", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 945.350681] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 945.410668] input: syz1 as /devices/virtual/input/input110 16:50:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:27 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="01806839", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x0, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 945.556902] input: syz1 as /devices/virtual/input/input111 16:50:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:27 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 945.664106] FAULT_INJECTION: forcing a failure. [ 945.664106] name failslab, interval 1, probability 0, space 0, times 0 [ 945.724048] CPU: 1 PID: 22081 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 945.732017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.741375] Call Trace: [ 945.743953] dump_stack+0x142/0x197 [ 945.747565] should_fail.cold+0x10f/0x159 [ 945.751702] should_failslab+0xdb/0x130 [ 945.755660] kmem_cache_alloc+0x2d7/0x780 [ 945.759791] ? wait_for_completion+0x420/0x420 [ 945.764380] __kernfs_new_node+0x70/0x420 [ 945.768617] kernfs_new_node+0x80/0xf0 [ 945.772490] __kernfs_create_file+0x46/0x323 [ 945.776885] sysfs_add_file_mode_ns+0x1e4/0x450 [ 945.781544] internal_create_group+0x232/0x7b0 [ 945.786112] sysfs_create_group+0x20/0x30 [ 945.790245] lo_ioctl+0x1176/0x1ce0 [ 945.793859] ? loop_probe+0x160/0x160 [ 945.797658] blkdev_ioctl+0x96b/0x1860 [ 945.801563] ? blkpg_ioctl+0x980/0x980 [ 945.805438] ? __might_sleep+0x93/0xb0 [ 945.809309] ? __fget+0x210/0x370 [ 945.812763] block_ioctl+0xde/0x120 [ 945.816379] ? blkdev_fallocate+0x3b0/0x3b0 [ 945.820685] do_vfs_ioctl+0x7ae/0x1060 [ 945.824559] ? selinux_file_mprotect+0x5d0/0x5d0 [ 945.829301] ? lock_downgrade+0x740/0x740 [ 945.833436] ? ioctl_preallocate+0x1c0/0x1c0 [ 945.837834] ? __fget+0x237/0x370 [ 945.841280] ? security_file_ioctl+0x89/0xb0 [ 945.845679] SyS_ioctl+0x8f/0xc0 [ 945.849030] ? do_vfs_ioctl+0x1060/0x1060 [ 945.853177] do_syscall_64+0x1e8/0x640 [ 945.857049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 945.861881] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 945.867054] RIP: 0033:0x45a567 [ 945.870231] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.877926] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 945.885188] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 945.892461] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 945.899716] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 945.906972] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 16:50:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 946.031572] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 946.075568] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 946.115219] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:50:28 executing program 2 (fault-call:3 fault-nth:17): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:28 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$TIOCGPTLCK(r7, 0x80045439, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x11, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff]}}, r8}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r8, 0x401}}, 0x18) 16:50:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="5c554ab549d228063d1427c3333036b8283d4c39bf8cd47bf4ec22342678788c4ba3967a0901bad46d1d14a0b1c3780ff4cd520361a480129b38ffbe5e011c94a4e6c322f18d94ba043586635380ce203322b4197b352d620b2c734dc6c523f09b9968b29cd5851280f1cd0fb095a9659f3d49e8a7ff70e65b73bec2e1c8ace12d80fe3702799dabbb964dda8f733e9a4c26846054550b155fdcda133c387bddd455fa547b04c60767a123853827a1ddfe8a35b79d2a0824a1604427d00880b88593aa88444ee4e85e6d907602df01a520d947c8b82c62e2da3d118aef8835b8620017c26222359d778a3f3bb08ebeb789aaf403f981340274469be0a19173c422012dfa5fd58a97befa3adc1a4153778e1088b613b61390c983c55cde8b4bc259cacad12915822160dd635fe1efac46f38bddee6f1675e21ff714ceedb8a48b6c3de7c4c979498f9d38841ce67675b7af9292aec3f0ac5de9a646049dc32f1c678ce05948bad3f6c1b5689eb6be6f38eb773f2ddae7ba01c785fce20f7878a459159ca262b3e6e1e8c89113c3799ef387b6f2685223f75b4c6f571746276925697c7d23bd60935029a24d67dfb95ff70a8efcbf80ddb7f32144cbe8973162b2c39d5485080ee45c12ac0d9f8f91817ed96a18ba2542a29746f3b8e535b39d106cdd69296d0909f36365c13c933db5316c76fd2dab51fa5458662732b40381dd92a9e527ed56c638ad5ec04c7e53a8f1a4015553290163f47b9b3f63a8207c89a3577e788de212a5033492ed9b2cdb27fb12cc1910658fe9b38b9bd3681218c962902d0688fe2f0b0b5c5942b1037a9d11c81e09795ec5757fc89c6e5a9de9d10cf948dc80ecf6ea7210697935d47b585ab4c59fe61c35c8e2e4ea8e162e4bbbdc82f1482e94bc281fdb25ada588886d72ab18fe46e2c68119e887f015e00e42d94bd8e4f6e7ddfc90d2d3ab9815479c481e95f858ebc39e7d9cf0132c03aafa917341989506ef38e4ef537c7e419702ef0c85fb8579f440d0d06fef673b72affed8a21a34c3ed5e2d94cd4858744de936f03dbe7e781e69d03e79fd740e1a898766cb7932725962f57ceb5f5955e17f67c7618351f67b6899f2869154ff0c2e844e8a9aa10eeac1620b114143a9c69c63ea1f37a5f0c4ede215be8175d1e43d2812d42e3c45020673f2c74b6126caa17357932787bc00a451a63cfbd324c89c9f3fc27dde03f68470b9a4b7b0ae1578e194b05b92947cc06e376d48058196d4232486eeb5683e96a64643cb7dc3743f46ba70605ea477db1f34a912664913f4ab5970e2788f7163ba9d046d678a97bed56cfa9bd4a345c7a2d6d6706fc832ae282877deb32ce18554e53aa6d29c3c9572d1a01c7f4f08b6bee0d163f5f6e6f0178caee7af6b5add0862e43369052ff965f140f53e2c1e39ce85ab146fc19ab766b414fb1f12c9470b1da559b7d406251883264b57e9667ba6c1658391bc07a51dbb4c6a9135528d15a7911522d67de5989d08afdc44a531b51af147f4e0b93279cd148c41aee42852a35152bf2b0350b42640808036995b6c9b247b4ee2045c4b597e817d4df5ae0312f2bb4e7c156c9df493ec7f42f8711faf1d4dd72c37b8cf600d3e3da53980f400250974e0a991e7ef3e96544552f1214119acde968cd7d074c0f95e8eaf823779775b16e0e725bcc963ea403d05f12c560c5e0b505ba4b81e487b87cb8eb7d80b500c45ea208c63eec85efae9f4c4693f7451d51d5818186319cfb13b782791e48e76ec7e64589c308bf5ca75ed73c58f53f913774809453ed537dc1c28ae0ba131432ab65ee2d5fcad6ce7e2b046e4fb30d25c61cf9899591bbb5246224a6af93ee3c528bef7b1a2b7d1e38675235e8496f85194857bbe3ab73d73c9a3d2c5836349bc42caf022b78b93055f18b466cca1c661d9b58ab77fa072f3d9988fd858fa7ed030626b23adddcf77f8b68fa089a347ba5baa9aba288e34fa69045b7d31f061f79dc89ba3ee98b32e02921c95b3829bda591dd1a4bb1d7adb564bc6e4e88c7bd3a838002e649b48b55f33012974744a7fde7c86657f4742ee36c275abd10dbc0d20c83d38687adb10048bfcee4554558ddbbf43b1e9dd7ec7397f9a0aac0bf214495d9ed288c378732816975b3bf6f5c0007310b20d1203843cd9a711c9fdba83aa351e753fd9a9da22e3cb85e212a00b5d65870b4dda6099c867052c1fa2036e98f7416939769b0b5afce02b3c5d33daab19d684608a663c3e647e8542b7fffe808eea6cff30f569910371587098d20b56f930a437b3aaa5cea724d20c25589a68ffcd0ddecbf75c59553e503ddb8b3ad8d57f276f176f05ca85cb36319fc51d37404337c3d76b799f9aba756e79e541b1cf4269b87bd962122ae5bfe70641c6ddaad1f7e43c9eb075b1b8620964db5dd7048359ace51995ab0d36141c30c3c7954a1a7bf86bc684e7a7e224c81fe5e845d9989e46a7b7804a8580fc134fc835366ca633ef7f31c31a2ba1dc2459e988a0212d129381220623ab4e10d3960dd5a72630da15f852418a2d05fd1e28080bdf4eed3cbeba617568d9bbd7d5ee578b2ceac875d4abd5498e8cd145a0707721c6b10fa4830927d683818ec4bab249b13e04b5060f5555db29b2290dd93bcb774789d32842360d11923f0e1389b4c3896939ce2c51a39a8d56158c1f03de82ba6a01982728991d3d7ea3c0388e20a1b4f9d08722df40fbf57beee34fcc2af05aa3b3ff7eef004a341c71603dd9b735270ca1f2faf44b80397ac791b161ad671b7b68615097562f78490489105d87350cc0432730377c5d114c3aadc0b763ea1e723005420a2d66308842241415291683b1e07c8736fad6ba13661b347eae2a225307116251695b870ee10f8a689f2c92c0a14f91aedb37813a25d4c3841e16ec522e8baf2157e78803ffd8d70bdb3528d41c8756b69aca660164c7012b2b7c334b709bb25252730ec829977e509384c17e65849768fb7d50ed1bddc9bbaf7349244fb6c31812da91b5d0c3f30b93bf75ac65ff1202ec102ff55dc5f1262ac020eef0441b07b13d63f55c41abc2064c1ab1ab6ad29ec3a5773a5ecffc95c2fa4ccdcf54e7ad457d3a59fa742607cc2971e88d20feaee56adc378dcad0d6abc28b203d4529ad9ff14fe19e999dd6b948d01b49753f1c8eb288cd8755c6ece8c20de13f6b9748a68228971770df607d81225fb567c81a75a605cb42b8928dfa6bc753f34934020f5ce9e5f826023bc07507cc25fff59eef1ad039c74318ee44fc049644fafc77c771e28f7039f0f348e5ac366ca9841be8dbce30e624a1f6f1c47b016cbbcefd6e1b15eb8260db50f461b29ff2a38a3183158d396a05bbd7391b25e2ac7817198b02a0fb3c2bb060c8851b6f5529ccbb6a5464bebbcee11c139e9fc49aa2becd64617808b0349be07db6ec0ab76618c7dcfacbf0c6a1e21b392713ccc050eedbc59a29f9c82389afdf74395183d5643d0221a7ec83084d62d24370fabbb66234bbf6fc1c46a1548599342bc5ef6a96cd482c48646dbe9c7c5873b2d1b3719ed939cc312c8dbfe4e78d9dbbde69624ad7449cfd167b673d0a51d724d65e3356c865a9c3"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 946.147030] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 946.165076] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 946.215953] input: syz1 as /devices/virtual/input/input112 16:50:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:28 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x0, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb14}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 946.491527] FAULT_INJECTION: forcing a failure. [ 946.491527] name failslab, interval 1, probability 0, space 0, times 0 [ 946.563532] CPU: 0 PID: 22158 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 946.571474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.580837] Call Trace: [ 946.587370] dump_stack+0x142/0x197 [ 946.591045] should_fail.cold+0x10f/0x159 [ 946.595216] should_failslab+0xdb/0x130 [ 946.599207] kmem_cache_alloc+0x2d7/0x780 [ 946.603366] ? wait_for_completion+0x420/0x420 [ 946.607986] __kernfs_new_node+0x70/0x420 [ 946.612143] kernfs_new_node+0x80/0xf0 [ 946.616044] __kernfs_create_file+0x46/0x323 [ 946.620449] sysfs_add_file_mode_ns+0x1e4/0x450 [ 946.625114] internal_create_group+0x232/0x7b0 [ 946.629692] sysfs_create_group+0x20/0x30 [ 946.633830] lo_ioctl+0x1176/0x1ce0 [ 946.637455] ? loop_probe+0x160/0x160 [ 946.641252] blkdev_ioctl+0x96b/0x1860 [ 946.645119] ? blkpg_ioctl+0x980/0x980 [ 946.649011] ? __might_sleep+0x93/0xb0 [ 946.652879] ? __fget+0x210/0x370 [ 946.656315] block_ioctl+0xde/0x120 [ 946.659923] ? blkdev_fallocate+0x3b0/0x3b0 [ 946.664228] do_vfs_ioctl+0x7ae/0x1060 [ 946.668098] ? selinux_file_mprotect+0x5d0/0x5d0 [ 946.672834] ? lock_downgrade+0x740/0x740 [ 946.676962] ? ioctl_preallocate+0x1c0/0x1c0 [ 946.681352] ? __fget+0x237/0x370 [ 946.684804] ? security_file_ioctl+0x89/0xb0 [ 946.689195] SyS_ioctl+0x8f/0xc0 [ 946.692552] ? do_vfs_ioctl+0x1060/0x1060 [ 946.696685] do_syscall_64+0x1e8/0x640 [ 946.700553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.705381] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 946.710552] RIP: 0033:0x45a567 [ 946.713723] RSP: 002b:00007f22ada63a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.721428] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 946.728762] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 946.736013] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 946.743263] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 946.750513] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000005 [ 946.763882] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 946.773265] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 946.782753] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 946.791939] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 946.801015] net_ratelimit: 22 callbacks suppressed [ 946.801020] protocol 88fb is buggy, dev hsr_slave_0 16:50:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x0, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:29 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x0, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:29 executing program 2 (fault-call:3 fault-nth:18): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/u\anput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="347b3d0050000104846af426d047d5f200"/28, @ANYRES32=r11, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_delrule={0x64, 0x21, 0x800, 0x70bd2c, 0x25dfdbfe, {0x2, 0x10, 0x0, 0xc0, 0x20, 0x0, 0x0, 0x8, 0x20}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, @FRA_SRC={0x6, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'yam0\x00'}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}]}, 0x64}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r15}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3b00000010000189cfb4c3969d1b161a439600e366218fc5c3090000b309d878e4ccad2cf47d459f4e8f4d58c1686dd85aaef4036c044d47cec255ac", @ANYRES32=r23, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r20, &(0x7f0000000000)={0x0, 0xffffffffffffff86, &(0x7f00000000c0)={&(0x7f0000002700)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdffe, {0x80, 0x20, 0x14, 0x19, 0x0, 0x0, 0xff, 0xe, 0x1300}, ["", ""]}, 0x1c}}, 0x20044810) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r23], 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x238, r3, 0xe32, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x367}}}, {0x3c, 0x1, @enabled={{{0xfffffffffffffe23, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x19c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x800) r24 = syz_open_dev$evdev(&(0x7f0000000180)='5%ev/i\xb7\xca^`\b\x00vent#\x00', 0x8000, 0x400200) r25 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r25, r24) [ 946.801090] protocol 88fb is buggy, dev hsr_slave_1 [ 946.817118] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:29 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x0, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0xfffffffc, 0x8573, 0x3}, &(0x7f00000002c0)=0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r5, r4) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x2, 0x9, 0x8c47, 0xfe}, 0x16, [0x6, 0x29f, 0x3, 0xad80, 0x4, 0xe1, 0x1, 0xffffffff, 0x1000, 0x6, 0x8, 0x4, 0x37, 0x1000, 0x8, 0x55, 0x2, 0x400, 0x4676ee03, 0x1, 0x9, 0x3ff, 0x3, 0x1000, 0x6, 0x5, 0x41, 0xaac99877, 0xffffff79, 0x0, 0x9, 0x5, 0x10001, 0x8000, 0xfffffffb, 0xfffffffa, 0x8, 0xfff, 0x3, 0x4, 0x4, 0x0, 0x1, 0x101, 0x9, 0x9, 0x9, 0x0, 0x7, 0x200, 0x80000000, 0x101, 0x6, 0x1, 0x1, 0x7f, 0xbc4e, 0x6, 0x3, 0x79, 0x3, 0x358b61a8, 0x12, 0x7], [0x1, 0xf961, 0x20, 0x4, 0x1, 0x5, 0x1, 0xffffffff, 0x5, 0x9, 0x8f9, 0x8fb, 0x4, 0x3, 0x81, 0xa3a8, 0x1000, 0x6, 0x46, 0x8, 0x8000, 0x2, 0x24d, 0x6, 0x3, 0x6, 0x0, 0x80, 0x7, 0x400, 0x7, 0x1000, 0x7f, 0x401, 0x200, 0x401, 0x8, 0x0, 0xc000000, 0x81, 0x4, 0x3, 0x2, 0xfffffff7, 0xfffffff7, 0xc2, 0x0, 0x7fffffff, 0x5, 0x3, 0x1000, 0xfff, 0xfffff800, 0x1, 0x2, 0x6, 0x3, 0x2, 0x7, 0x4d2, 0x0, 0x8, 0x4, 0x9], [0x4, 0x1f, 0x7, 0x8, 0x406c2dce, 0x8, 0x6, 0x81, 0x7, 0x2, 0x3, 0x3, 0x0, 0x3, 0x81, 0x4, 0x1, 0x0, 0x80, 0xffff, 0xa842, 0x3, 0x3, 0xdf7, 0x536e956, 0xffffffff, 0x0, 0x8, 0x1, 0x1, 0x8, 0x7fffffff, 0x3, 0x0, 0xdb, 0xcc, 0x9, 0x4e, 0x50c939f7, 0xff, 0x5, 0x5, 0x0, 0x5, 0x5, 0x80000000, 0x20, 0x7ce, 0x1800, 0x1, 0x9, 0x8, 0x8001, 0x9, 0x7f, 0x5a8, 0x0, 0x3f, 0x6, 0x3, 0x1ff, 0x1, 0x6, 0xc335], [0x3, 0x0, 0x7d2, 0x3, 0x3f, 0x7, 0x1ff, 0x3ff, 0x1, 0x8, 0x48, 0x6, 0x5, 0xffffffff, 0x3, 0x100, 0x2, 0x3, 0x1, 0x9, 0x80000001, 0x2, 0x1000, 0xa9, 0xe323, 0x10001, 0x2, 0x8, 0x8, 0x0, 0x7fff, 0xd3fd, 0x1, 0x3, 0x10001, 0x6, 0x0, 0xa7, 0x3, 0x7, 0x0, 0xb909, 0x7, 0x81, 0x2, 0x1, 0x2, 0x6, 0x2, 0x0, 0x7f, 0x5, 0x4, 0x9, 0xab, 0x100, 0x8000, 0x7, 0x5, 0x1, 0x200, 0x738, 0xffffb0c5, 0x1163]}, 0x45c) r6 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x101000) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 16:50:29 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0x0, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 947.126018] input: syz1 as /devices/virtual/input/input114 [ 947.182873] FAULT_INJECTION: forcing a failure. [ 947.182873] name failslab, interval 1, probability 0, space 0, times 0 [ 947.239498] CPU: 1 PID: 22219 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 947.247447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.256825] Call Trace: [ 947.259420] dump_stack+0x142/0x197 [ 947.263046] should_fail.cold+0x10f/0x159 [ 947.267200] should_failslab+0xdb/0x130 [ 947.271159] kmem_cache_alloc+0x2d7/0x780 [ 947.275292] ? wait_for_completion+0x420/0x420 [ 947.279861] __kernfs_new_node+0x70/0x420 [ 947.284014] kernfs_new_node+0x80/0xf0 [ 947.287885] __kernfs_create_file+0x46/0x323 [ 947.292276] sysfs_add_file_mode_ns+0x1e4/0x450 [ 947.296948] internal_create_group+0x232/0x7b0 [ 947.301520] sysfs_create_group+0x20/0x30 [ 947.305653] lo_ioctl+0x1176/0x1ce0 [ 947.309265] ? loop_probe+0x160/0x160 [ 947.313062] blkdev_ioctl+0x96b/0x1860 [ 947.316930] ? blkpg_ioctl+0x980/0x980 [ 947.320806] ? __might_sleep+0x93/0xb0 [ 947.324678] ? __fget+0x210/0x370 [ 947.328115] block_ioctl+0xde/0x120 [ 947.331723] ? blkdev_fallocate+0x3b0/0x3b0 [ 947.336026] do_vfs_ioctl+0x7ae/0x1060 [ 947.339897] ? selinux_file_mprotect+0x5d0/0x5d0 [ 947.344637] ? lock_downgrade+0x740/0x740 [ 947.348769] ? ioctl_preallocate+0x1c0/0x1c0 [ 947.353162] ? __fget+0x237/0x370 [ 947.356602] ? security_file_ioctl+0x89/0xb0 [ 947.361085] SyS_ioctl+0x8f/0xc0 [ 947.364436] ? do_vfs_ioctl+0x1060/0x1060 [ 947.368569] do_syscall_64+0x1e8/0x640 [ 947.372442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 947.377271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 947.382444] RIP: 0033:0x45a567 [ 947.385619] RSP: 002b:00007f22ada63a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.393308] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 947.400561] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 [ 947.407814] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 947.415068] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 947.422332] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 947.491016] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 947.512364] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 947.521575] protocol 88fb is buggy, dev hsr_slave_0 [ 947.526663] protocol 88fb is buggy, dev hsr_slave_1 [ 947.555961] input: syz1 as /devices/virtual/input/input115 [ 947.578246] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 947.606871] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 947.642811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:30 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0x0, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x4c88c0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000007c0)={{0x0, 0x6, 0x5, 0x5, 'syz1\x00', 0x1173}, 0x0, 0x200, 0x80000001, r2, 0x8, 0x2, 'syz0\x00', &(0x7f0000000200)=['/dev/ptmx\x00', 'posix_acl_access\'proc\x00', '/dev/input/event#\x00', 'em1:vboxnet0system::nodevnodev!-cpusetvmnet1selinuxnodevGPLself&\x00', 'wlan1security,systemcpuset\x89#wlan0@\x00', '/selinux/status\x00', '/dev/uinput\x00', '/dev/input/event#\x00'], 0xc4, [], [0x1, 0x4, 0x1, 0x9]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4, 0x280) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000180)={0x1c2, 0x2, &(0x7f00000003c0)="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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) fcntl$setown(r5, 0x8, r6) dup2(r4, r3) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r7, 0xc040564b, &(0x7f0000000140)={0x6, 0x0, 0x200e, 0xfff, 0x3, {0x4, 0x800000}}) 16:50:30 executing program 2 (fault-call:3 fault-nth:19): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x0, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 947.824612] input: syz1 as /devices/virtual/input/input116 16:50:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5c4", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 947.900228] FAULT_INJECTION: forcing a failure. [ 947.900228] name failslab, interval 1, probability 0, space 0, times 0 [ 947.920120] protocol 88fb is buggy, dev hsr_slave_0 [ 947.920135] protocol 88fb is buggy, dev hsr_slave_0 [ 947.925240] protocol 88fb is buggy, dev hsr_slave_1 [ 947.930250] protocol 88fb is buggy, dev hsr_slave_1 [ 947.944134] CPU: 0 PID: 22272 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 947.952066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.961423] Call Trace: [ 947.964003] dump_stack+0x142/0x197 [ 947.967619] should_fail.cold+0x10f/0x159 [ 947.971752] should_failslab+0xdb/0x130 [ 947.975710] __kmalloc+0x2f0/0x7a0 [ 947.979233] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 947.984670] ? kobject_uevent_env+0x378/0xc23 [ 947.989150] ? rcu_read_lock_sched_held+0x110/0x130 [ 947.994152] ? kobject_get_path+0xbb/0x1a0 [ 947.998370] kobject_get_path+0xbb/0x1a0 [ 948.002417] ? devm_device_remove_groups+0x50/0x50 [ 948.007354] kobject_uevent_env+0x39c/0xc23 [ 948.011662] ? internal_create_group+0x49a/0x7b0 [ 948.016420] kobject_uevent+0x20/0x26 [ 948.020225] lo_ioctl+0x11e7/0x1ce0 [ 948.023850] ? loop_probe+0x160/0x160 [ 948.027639] blkdev_ioctl+0x96b/0x1860 [ 948.031514] ? blkpg_ioctl+0x980/0x980 [ 948.035392] ? __might_sleep+0x93/0xb0 [ 948.039261] ? __fget+0x210/0x370 [ 948.042699] block_ioctl+0xde/0x120 [ 948.046309] ? blkdev_fallocate+0x3b0/0x3b0 [ 948.050615] do_vfs_ioctl+0x7ae/0x1060 [ 948.054486] ? selinux_file_mprotect+0x5d0/0x5d0 [ 948.059223] ? lock_downgrade+0x740/0x740 [ 948.063352] ? ioctl_preallocate+0x1c0/0x1c0 [ 948.067752] ? __fget+0x237/0x370 [ 948.071217] ? security_file_ioctl+0x89/0xb0 [ 948.075635] SyS_ioctl+0x8f/0xc0 [ 948.078998] ? do_vfs_ioctl+0x1060/0x1060 [ 948.083152] do_syscall_64+0x1e8/0x640 [ 948.087024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 948.091855] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 948.097029] RIP: 0033:0x45a567 [ 948.100199] RSP: 002b:00007f22ada63a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.107900] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 948.115154] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 948.122416] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 948.129701] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 948.136965] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000005 [ 948.144703] protocol 88fb is buggy, dev hsr_slave_0 16:50:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xffff, 0x4, 0x3ff, 0x81}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0xd}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000300)={{0x5}, {0x9, 0x5}, 0x2, 0x7}) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40000, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x1, 'veth0\x00', {}, 0x400}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x1f, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x6, 0xcd, &(0x7f0000000200)=""/205, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x8) [ 948.149791] protocol 88fb is buggy, dev hsr_slave_1 16:50:30 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) [ 948.253132] input: syz1 as /devices/virtual/input/input117 16:50:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:30 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 948.446608] input: syz1 as /devices/virtual/input/input118 16:50:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x3ff, @local, 0x48}, {0xa, 0x4e21, 0xeaf, @local, 0x2}, 0x4, [0x3336, 0x0, 0x5, 0x3ff, 0x7f, 0x6, 0xfff, 0x7]}, 0x5c) dup2(r2, r1) 16:50:30 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 948.651614] input: syz1 as /devices/virtual/input/input119 [ 948.755821] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 948.795187] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 948.805956] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 948.819354] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 948.845348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:31 executing program 2 (fault-call:3 fault-nth:20): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:31 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x0, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x402000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000003c0)={@ipx={0x4, 0x0, 0x4d, "1bffdae9b868", 0x7}, {&(0x7f00000001c0)=""/99, 0x63}, &(0x7f0000000140), 0x5e}, 0xa0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0xa200, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000300)={0x0, 0xe, 0x2, 0xab9, 0x26, 0x0, &(0x7f0000000280)="39763c540be7a5e4e470665d418c9a0307e31bbe9c2fe375d75132d1457aab0620a4b21979c4"}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r7, r2) [ 948.862173] input: syz1 as /devices/virtual/input/input120 16:50:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000700)='asymmetric\x00\x94\x85\x878\xfef6\xad6\xf7Kh\x95\xfa<\r\x92\x88Kh8\x82\x1d\xf7)T\xb4\xc1c\xbaQ\x03\x7fqG~\x9b\xe7\xf4/\xc4\xb75\xf2\x7f\xc2\x89\x98\xd9u\x10\x94}\x16H@\xa4\xbe\xbcN\x11\xf0\xd49Y\xec\xc6%\x1c\xd2J\xdc\x80\az\xc1\xe2\x18&\x00\x8f\x820x0) io_submit(r2, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 949.505777] input: syz1 as /devices/virtual/input/input124 [ 949.577645] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 949.617938] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 949.627425] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 949.657706] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:31 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x402000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000003c0)={@ipx={0x4, 0x0, 0x4d, "1bffdae9b868", 0x7}, {&(0x7f00000001c0)=""/99, 0x63}, &(0x7f0000000140), 0x5e}, 0xa0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0xa200, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000300)={0x0, 0xe, 0x2, 0xab9, 0x26, 0x0, &(0x7f0000000280)="39763c540be7a5e4e470665d418c9a0307e31bbe9c2fe375d75132d1457aab0620a4b21979c4"}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r7, r2) 16:50:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000001c0)=0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000000c0)={0x0, "735351351a5e26596ccc463ddae6caa9e03b188bf7515286798d146f08ede766", 0x2, 0x1000, 0xaba, 0x200, 0x3, 0x429f193e265c2a8f, 0x81, 0x81}) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000200)=0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r8 = dup2(r7, r4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$UI_SET_LEDBIT(r10, 0x40045569, 0x5) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) 16:50:31 executing program 2 (fault-call:3 fault-nth:21): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 949.700965] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 949.782325] input: syz1 as /devices/virtual/input/input126 [ 949.806423] input: syz1 as /devices/virtual/input/input127 16:50:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:32 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x402000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000003c0)={@ipx={0x4, 0x0, 0x4d, "1bffdae9b868", 0x7}, {&(0x7f00000001c0)=""/99, 0x63}, &(0x7f0000000140), 0x5e}, 0xa0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0xa200, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000300)={0x0, 0xe, 0x2, 0xab9, 0x26, 0x0, &(0x7f0000000280)="39763c540be7a5e4e470665d418c9a0307e31bbe9c2fe375d75132d1457aab0620a4b21979c4"}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r7, r2) [ 949.978129] input: syz1 as /devices/virtual/input/input128 [ 949.996921] input: syz1 as /devices/virtual/input/input129 16:50:32 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 950.084850] FAULT_INJECTION: forcing a failure. [ 950.084850] name failslab, interval 1, probability 0, space 0, times 0 [ 950.119892] CPU: 0 PID: 22437 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 950.127835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.137190] Call Trace: [ 950.139766] dump_stack+0x142/0x197 [ 950.143417] should_fail.cold+0x10f/0x159 [ 950.147573] should_failslab+0xdb/0x130 [ 950.151668] kmem_cache_alloc_node+0x287/0x780 [ 950.156250] __alloc_skb+0x9c/0x500 [ 950.159870] ? skb_trim+0x180/0x180 [ 950.163491] ? netlink_has_listeners+0x20a/0x330 [ 950.168234] kobject_uevent_env+0x781/0xc23 [ 950.172539] ? internal_create_group+0x49a/0x7b0 [ 950.177292] kobject_uevent+0x20/0x26 [ 950.181095] lo_ioctl+0x11e7/0x1ce0 16:50:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 950.184743] ? loop_probe+0x160/0x160 [ 950.188532] blkdev_ioctl+0x96b/0x1860 [ 950.192421] ? blkpg_ioctl+0x980/0x980 [ 950.196328] ? __might_sleep+0x93/0xb0 [ 950.200212] ? __fget+0x210/0x370 [ 950.203659] block_ioctl+0xde/0x120 [ 950.203670] ? blkdev_fallocate+0x3b0/0x3b0 [ 950.203681] do_vfs_ioctl+0x7ae/0x1060 [ 950.203694] ? selinux_file_mprotect+0x5d0/0x5d0 [ 950.203705] ? lock_downgrade+0x740/0x740 [ 950.203716] ? ioctl_preallocate+0x1c0/0x1c0 [ 950.203728] ? __fget+0x237/0x370 16:50:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000000c0)={0x4}) dup2(r2, r1) [ 950.203743] ? security_file_ioctl+0x89/0xb0 [ 950.211670] SyS_ioctl+0x8f/0xc0 [ 950.211681] ? do_vfs_ioctl+0x1060/0x1060 [ 950.211695] do_syscall_64+0x1e8/0x640 [ 950.211704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 950.211723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 950.211732] RIP: 0033:0x45a567 [ 950.211737] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.211746] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 950.211751] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 16:50:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 950.211756] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 950.211761] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 950.211766] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 950.308535] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 950.330900] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 950.346175] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 950.361913] input: syz1 as /devices/virtual/input/input130 [ 950.375007] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 950.472038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:32 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r5, r4) 16:50:32 executing program 2 (fault-call:3 fault-nth:22): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000000c0)={{0x0, 0x7, 0x6, 0x8, 0xa8, 0x4}, 0xe0, 0x8, 0x0, 0x5, 0x1, "c0f10193ea1f4bfefb17ed47c0aeb8793fa7072d206064cc4ee87c463ea41fdb1358cea38eabe8bf6cc928d4d6eb58e729b14f8953439762b06d75b633d43ff4b75588880b6cf5e1a7d9a55186b3e9032190b12a9f3f0a4831a5c0c8916efa7c54497367074ffbecaf3b07000950bdc52464c3535836b1f91765596048daea6d"}) 16:50:32 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 950.716252] input: syz1 as /devices/virtual/input/input132 16:50:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 950.858285] FAULT_INJECTION: forcing a failure. [ 950.858285] name failslab, interval 1, probability 0, space 0, times 0 [ 950.902719] CPU: 1 PID: 22500 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 950.910680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.920045] Call Trace: [ 950.922912] dump_stack+0x142/0x197 [ 950.926556] should_fail.cold+0x10f/0x159 [ 950.930717] should_failslab+0xdb/0x130 [ 950.934699] kmem_cache_alloc_node_trace+0x280/0x770 [ 950.939815] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 950.945277] __kmalloc_node_track_caller+0x3d/0x80 [ 950.950226] __kmalloc_reserve.isra.0+0x40/0xe0 [ 950.954903] __alloc_skb+0xcf/0x500 [ 950.958544] ? skb_trim+0x180/0x180 [ 950.962175] ? netlink_has_listeners+0x20a/0x330 [ 950.966940] kobject_uevent_env+0x781/0xc23 [ 950.971264] ? internal_create_group+0x49a/0x7b0 [ 950.976053] kobject_uevent+0x20/0x26 [ 950.979857] lo_ioctl+0x11e7/0x1ce0 [ 950.983495] ? loop_probe+0x160/0x160 [ 950.987304] blkdev_ioctl+0x96b/0x1860 [ 950.991199] ? blkpg_ioctl+0x980/0x980 [ 950.995086] ? __might_sleep+0x93/0xb0 [ 950.998959] ? __fget+0x210/0x370 [ 951.002403] block_ioctl+0xde/0x120 [ 951.006016] ? blkdev_fallocate+0x3b0/0x3b0 [ 951.010326] do_vfs_ioctl+0x7ae/0x1060 [ 951.014201] ? selinux_file_mprotect+0x5d0/0x5d0 [ 951.018941] ? lock_downgrade+0x740/0x740 [ 951.023071] ? ioctl_preallocate+0x1c0/0x1c0 [ 951.027474] ? __fget+0x237/0x370 [ 951.030915] ? security_file_ioctl+0x89/0xb0 [ 951.035305] SyS_ioctl+0x8f/0xc0 [ 951.038667] ? do_vfs_ioctl+0x1060/0x1060 [ 951.042801] do_syscall_64+0x1e8/0x640 [ 951.046671] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:50:33 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 951.051504] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 951.056685] RIP: 0033:0x45a567 [ 951.059951] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 951.067642] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 951.074895] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 [ 951.082150] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 951.089434] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 951.096789] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 16:50:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 951.166926] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 951.203930] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 951.216208] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 951.255919] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 951.319670] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, 0x0}]) 16:50:33 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x0, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r1) 16:50:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)="7be6fbe64cb06d3e68c6b0ffa6b247b1bd9fde6145da768ff13970ddb56dcd05fccd2ed9ff872021b4b61da2e55dad081d7a339c2b77df1641884a9096a460cd10d2ea3f84cb51b5e1520ba0a35759ec8b17858103bff5acbb0148e20e194f0a4a68ef95ff1f89c7e2e7192383749743a0fc05edac074dd3e267febfbace0dda358a4bf1e650bd1f8a0a02405e5fe684332a60c5f5e2", 0x96}, {&(0x7f00000001c0)="1ad013538b72e9473faccfed2e3243e24707d569c3c6a36f5bfd4de41db0a9da737d37201b4b55f9965261f22ef6203e1ab0da3a2bfe5c3de5ba5b9ced9c8153c46e6a380a199f6ae3bed860a0b92482985e5b1d5d18da3a51ab169b9f59cc312f8ad82d9daefffedd6b9df728101f64490f96ed6fc274f5ed035d5c4dbd8e6d4b5462e07de4f5ea2a8a5fe1b52c27e30fcdc3fd07d2f0672a6145365ade48981bc4f72274b0e4638575d2459fb0890e4b2b3a15bb9bc4ab4dde10fe9cd720061e460c73b0e9cb32d8a50e6239535ae0388b7cf8ed48e5f26433794ba02487842413b7f697", 0xe5}, {&(0x7f0000000a00)="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", 0x12b}, {&(0x7f00000003c0)="46f3da61b00362cd724abf751d82b1d802d14741e85e4ae3813c24e9811bfd", 0x1f}, {&(0x7f0000000400)="7f6247b66cb03d525517be026dd3dc698f5217aaa7332ac06cdb3fe6b71eedbebb62a76a113aebe9d9c84593501641e9c5f244b3203d33016cc2d93ea2c6f915a3a0c440db90323dc96239d1232203f7dfc3d7638bf008e20a30931207abb48f0b29dbff0b5439c7f6e4c94f930724edf95939818c4ed26b181eeec6adca9c784fe2f51fc56bfb36906903449a7817d9633b0b7e7d14a33bb81bd26569d4", 0x9e}, {&(0x7f00000004c0)="40ca3c9e6b7e1b3d7830c2e5d67d68cf7affd1e1bc75854af230515483c4470b619bde1ded13ad95a7d1a0b0dcd80ba8581b07d9b3eec2351c91b520b0142b80d96779ae7cee1bbb78cd9aae5d57510c79cb94c23a2e1304e3f7b5e10df660ea227b3a0a617f2196f11ab0a6d58c874c7e60242209a86663747c071104c14c2c034805ad048f777dfb498b3a1aff6aa2b04cd1f4711ba01600ab5561141349bcb5596f1466738ddfb45bf50399e96ec5880349b5add5d1ee527185fc5e38bf93a36f25419cefa5b92a37b158131f6479d65cb4a51ab7721a50", 0xd9}, {&(0x7f00000005c0)="10ff1136df4b9db505997290a0a212da64c0341f158ae8268a55472ed94296b1eef80da0f4dcbc0294cd1fed7817dd76a186b950c1c59d72a56cb7288bc455d9b980cc56e817b8a42d4bcc912987d76b583b649b2e21192d4c30a9cf724389fdba3238e19c8a3ec4c4aeea0a908325d3c1a3d1c293170d01e7dce066638d8fc48ab9e8099eaeb81c1a52dd620e31a4106551b58c6d411b699a477d17c324bf6859be8faabd05b320b748a4b9fee452e210863e75c0f76857db2486f0533a3baa810dd9cb53b3ae9f67bbda1533825d2d64e55b8aa414a45396a398", 0xdb}, {&(0x7f00000006c0)="5854ec3868d00d3f70f9f3ff2be9ac54de58d8c8c711ab4e16586c5d5b80f910efcf46d1dac620406eee9103903b5fe415171df9c4037b926cdbe807063569de45d9d47a64d4e355657959c81eaa67aa66b8b4e5d7d1775868ad0b77d84f808a1e892a3192e22bc1d0f2ac6d629cf1db585cfda679268f6aa306769864ea80f034a107d18a47904ee6852882c112d3b7dd0214939574ed1a085368006606ddf6ecfa4fc27d118dcfb67980021a599726736641f38862086f907491a09dd092608628d5ad5d17284b5f087d47dc24e863", 0xd0}], 0x8) dup2(0xffffffffffffffff, r2) 16:50:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:33 executing program 2 (fault-call:3 fault-nth:23): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 951.417039] input: syz1 as /devices/virtual/input/input134 [ 951.434888] input: syz1 as /devices/virtual/input/input135 16:50:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) 16:50:33 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x0, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0xa}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) flock(r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/110) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r4, r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x62400, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000200)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000140)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000002c0)={0x771f, 0x8, 0x2, 0x6, 0x18, 0x40, 0xffff}, 0xc) r7 = dup(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x111, 0x6}}, 0x20) [ 951.628495] FAULT_INJECTION: forcing a failure. [ 951.628495] name failslab, interval 1, probability 0, space 0, times 0 [ 951.657466] CPU: 1 PID: 22553 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 951.666967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.676320] Call Trace: 16:50:33 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x0, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 951.678912] dump_stack+0x142/0x197 [ 951.682556] should_fail.cold+0x10f/0x159 [ 951.686709] should_failslab+0xdb/0x130 [ 951.686720] kmem_cache_alloc_node_trace+0x280/0x770 [ 951.686734] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 951.701305] __kmalloc_node_track_caller+0x3d/0x80 [ 951.701318] __kmalloc_reserve.isra.0+0x40/0xe0 [ 951.701329] __alloc_skb+0xcf/0x500 [ 951.701337] ? skb_trim+0x180/0x180 [ 951.701349] ? netlink_has_listeners+0x20a/0x330 [ 951.701361] kobject_uevent_env+0x781/0xc23 [ 951.701376] ? internal_create_group+0x49a/0x7b0 [ 951.710964] kobject_uevent+0x20/0x26 [ 951.710975] lo_ioctl+0x11e7/0x1ce0 [ 951.710986] ? loop_probe+0x160/0x160 [ 951.710997] blkdev_ioctl+0x96b/0x1860 [ 951.711005] ? blkpg_ioctl+0x980/0x980 [ 951.711020] ? __might_sleep+0x93/0xb0 [ 951.711029] ? __fget+0x210/0x370 [ 951.711043] block_ioctl+0xde/0x120 [ 951.711053] ? blkdev_fallocate+0x3b0/0x3b0 [ 951.711062] do_vfs_ioctl+0x7ae/0x1060 [ 951.711077] ? selinux_file_mprotect+0x5d0/0x5d0 [ 951.711086] ? lock_downgrade+0x740/0x740 [ 951.711097] ? ioctl_preallocate+0x1c0/0x1c0 [ 951.783588] ? __fget+0x237/0x370 [ 951.787049] ? security_file_ioctl+0x89/0xb0 [ 951.791459] SyS_ioctl+0x8f/0xc0 [ 951.794820] ? do_vfs_ioctl+0x1060/0x1060 [ 951.798951] do_syscall_64+0x1e8/0x640 [ 951.802825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 951.807776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 951.813078] RIP: 0033:0x45a567 [ 951.816260] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 951.824121] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 951.831394] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 [ 951.838658] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 951.845918] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 951.853186] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 951.860712] net_ratelimit: 16 callbacks suppressed [ 951.860717] protocol 88fb is buggy, dev hsr_slave_0 [ 951.870785] protocol 88fb is buggy, dev hsr_slave_1 [ 951.879739] input: syz1 as /devices/virtual/input/input137 [ 951.930540] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 951.959294] input: syz1 as /devices/virtual/input/input138 16:50:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 951.986390] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 952.078741] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 952.087984] protocol 88fb is buggy, dev hsr_slave_0 [ 952.087988] protocol 88fb is buggy, dev hsr_slave_0 [ 952.088032] protocol 88fb is buggy, dev hsr_slave_1 [ 952.088035] protocol 88fb is buggy, dev hsr_slave_1 [ 952.126854] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 952.185903] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 952.240103] protocol 88fb is buggy, dev hsr_slave_0 [ 952.245262] protocol 88fb is buggy, dev hsr_slave_1 16:50:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, 0x0}]) 16:50:34 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:34 executing program 2 (fault-call:3 fault-nth:24): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x65b3, 0x0, 0x0, 0x5, 0x7fffffff, 0xfffffffc, 0x9, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r6, 0x4}, &(0x7f0000000200)=0x8) 16:50:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x800, 0x344001) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz0\x00', {0x80, 0x0, 0xff, 0x1f}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x1, 0x7f, 0x20, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)="7be6fbe64cb06d3e68c6b0ffa6b247b1bd9fde6145da768ff13970ddb56dcd05fccd2ed9ff872021b4b61da2e55dad081d7a339c2b77df1641884a9096a460cd10d2ea3f84cb51b5e1520ba0a35759ec8b17858103bff5acbb0148e20e194f0a4a68ef95ff1f89c7e2e7192383749743a0fc05edac074dd3e267febfbace0dda358a4bf1e650bd1f8a0a02405e5fe684332a60c5f5e2", 0x96}, {&(0x7f00000001c0)="1ad013538b72e9473faccfed2e3243e24707d569c3c6a36f5bfd4de41db0a9da737d37201b4b55f9965261f22ef6203e1ab0da3a2bfe5c3de5ba5b9ced9c8153c46e6a380a199f6ae3bed860a0b92482985e5b1d5d18da3a51ab169b9f59cc312f8ad82d9daefffedd6b9df728101f64490f96ed6fc274f5ed035d5c4dbd8e6d4b5462e07de4f5ea2a8a5fe1b52c27e30fcdc3fd07d2f0672a6145365ade48981bc4f72274b0e4638575d2459fb0890e4b2b3a15bb9bc4ab4dde10fe9cd720061e460c73b0e9cb32d8a50e6239535ae0388b7cf8ed48e5f26433794ba02487842413b7f697", 0xe5}, {&(0x7f0000000a00)="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", 0x12b}, {&(0x7f00000003c0)="46f3da61b00362cd724abf751d82b1d802d14741e85e4ae3813c24e9811bfd", 0x1f}, {&(0x7f0000000400)="7f6247b66cb03d525517be026dd3dc698f5217aaa7332ac06cdb3fe6b71eedbebb62a76a113aebe9d9c84593501641e9c5f244b3203d33016cc2d93ea2c6f915a3a0c440db90323dc96239d1232203f7dfc3d7638bf008e20a30931207abb48f0b29dbff0b5439c7f6e4c94f930724edf95939818c4ed26b181eeec6adca9c784fe2f51fc56bfb36906903449a7817d9633b0b7e7d14a33bb81bd26569d4", 0x9e}, {&(0x7f00000004c0)="40ca3c9e6b7e1b3d7830c2e5d67d68cf7affd1e1bc75854af230515483c4470b619bde1ded13ad95a7d1a0b0dcd80ba8581b07d9b3eec2351c91b520b0142b80d96779ae7cee1bbb78cd9aae5d57510c79cb94c23a2e1304e3f7b5e10df660ea227b3a0a617f2196f11ab0a6d58c874c7e60242209a86663747c071104c14c2c034805ad048f777dfb498b3a1aff6aa2b04cd1f4711ba01600ab5561141349bcb5596f1466738ddfb45bf50399e96ec5880349b5add5d1ee527185fc5e38bf93a36f25419cefa5b92a37b158131f6479d65cb4a51ab7721a50", 0xd9}, {&(0x7f00000005c0)="10ff1136df4b9db505997290a0a212da64c0341f158ae8268a55472ed94296b1eef80da0f4dcbc0294cd1fed7817dd76a186b950c1c59d72a56cb7288bc455d9b980cc56e817b8a42d4bcc912987d76b583b649b2e21192d4c30a9cf724389fdba3238e19c8a3ec4c4aeea0a908325d3c1a3d1c293170d01e7dce066638d8fc48ab9e8099eaeb81c1a52dd620e31a4106551b58c6d411b699a477d17c324bf6859be8faabd05b320b748a4b9fee452e210863e75c0f76857db2486f0533a3baa810dd9cb53b3ae9f67bbda1533825d2d64e55b8aa414a45396a398", 0xdb}, {&(0x7f00000006c0)="5854ec3868d00d3f70f9f3ff2be9ac54de58d8c8c711ab4e16586c5d5b80f910efcf46d1dac620406eee9103903b5fe415171df9c4037b926cdbe807063569de45d9d47a64d4e355657959c81eaa67aa66b8b4e5d7d1775868ad0b77d84f808a1e892a3192e22bc1d0f2ac6d629cf1db585cfda679268f6aa306769864ea80f034a107d18a47904ee6852882c112d3b7dd0214939574ed1a085368006606ddf6ecfa4fc27d118dcfb67980021a599726736641f38862086f907491a09dd092608628d5ad5d17284b5f087d47dc24e863", 0xd0}], 0x8) dup2(0xffffffffffffffff, r2) [ 952.466621] input: syz1 as /devices/virtual/input/input139 [ 952.546884] FAULT_INJECTION: forcing a failure. [ 952.546884] name failslab, interval 1, probability 0, space 0, times 0 [ 952.585541] CPU: 1 PID: 22623 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 952.593487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.602841] Call Trace: [ 952.602856] dump_stack+0x142/0x197 [ 952.602873] should_fail.cold+0x10f/0x159 [ 952.609079] should_failslab+0xdb/0x130 [ 952.609092] kmem_cache_alloc_node+0x287/0x780 [ 952.621776] __alloc_skb+0x9c/0x500 [ 952.625415] ? skb_trim+0x180/0x180 [ 952.629045] ? netlink_has_listeners+0x20a/0x330 [ 952.633805] kobject_uevent_env+0x781/0xc23 [ 952.633823] kobject_uevent+0x20/0x26 [ 952.633832] lo_ioctl+0x11e7/0x1ce0 [ 952.633843] ? loop_probe+0x160/0x160 [ 952.633855] blkdev_ioctl+0x96b/0x1860 [ 952.633864] ? blkpg_ioctl+0x980/0x980 [ 952.633879] ? __might_sleep+0x93/0xb0 [ 952.633890] ? __fget+0x210/0x370 [ 952.633902] block_ioctl+0xde/0x120 [ 952.633910] ? blkdev_fallocate+0x3b0/0x3b0 [ 952.633919] do_vfs_ioctl+0x7ae/0x1060 [ 952.633931] ? selinux_file_mprotect+0x5d0/0x5d0 [ 952.633939] ? lock_downgrade+0x740/0x740 [ 952.633951] ? ioctl_preallocate+0x1c0/0x1c0 [ 952.642070] ? __fget+0x237/0x370 [ 952.642088] ? security_file_ioctl+0x89/0xb0 [ 952.642100] SyS_ioctl+0x8f/0xc0 [ 952.642109] ? do_vfs_ioctl+0x1060/0x1060 [ 952.642121] do_syscall_64+0x1e8/0x640 [ 952.642129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 952.642147] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 952.642155] RIP: 0033:0x45a567 [ 952.642160] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.720126] protocol 88fb is buggy, dev hsr_slave_0 [ 952.722096] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 16:50:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:34 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 952.722102] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 952.722109] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 952.722114] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 952.722120] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 952.756833] protocol 88fb is buggy, dev hsr_slave_1 [ 952.778842] input: syz1 as /devices/virtual/input/input140 [ 952.778960] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 952.817459] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:50:35 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 952.898419] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 952.925325] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000003c0)={'syz1\x00', {0x6, 0x8, 0x70, 0x9}, 0xf, [0x50, 0x100, 0x10001, 0x8, 0xffff0001, 0x8000, 0xe5, 0x8000, 0xff, 0x8, 0x1, 0x1, 0x70, 0x7ff, 0x3, 0x9, 0xfffffffd, 0x3, 0x1, 0x1, 0x80000001, 0x8, 0x3, 0x5, 0x6, 0xb85, 0xd837, 0x4, 0x1, 0x8, 0xfffffffb, 0x2, 0x9, 0x5, 0x101, 0x4, 0x0, 0x100, 0x0, 0x5, 0x8, 0x2, 0x0, 0x4, 0x5, 0x6, 0x3, 0x92, 0x2, 0x2, 0x1, 0x95, 0xffff, 0x9, 0x4, 0x7fffffff, 0x1e, 0x1000, 0x3ff, 0x3, 0x9, 0x9, 0x3, 0x1], [0x80000000, 0x1, 0xfffffc00, 0x9, 0x80000000, 0x62, 0x515c4802, 0x3, 0x800, 0x8, 0x4, 0x2, 0x7f, 0x9, 0xda, 0x10001, 0x80000001, 0x100, 0x1, 0x7f, 0x9, 0xffffffff, 0x200, 0xd26, 0x0, 0x800000, 0x4, 0x7a4b, 0xffffffff, 0x26, 0xffffff90, 0x7, 0x9, 0x7f, 0x4, 0x6, 0xff, 0xffff, 0x5, 0x80000000, 0xf4, 0x401, 0x74, 0x5, 0x1, 0x1ff, 0x7ff, 0x3f, 0x0, 0x8, 0x1000, 0x0, 0x5, 0x1, 0xfffffffc, 0x6, 0x0, 0x7, 0x7, 0x8, 0x7fe0000, 0xe2c, 0x10000, 0x4], [0x1f, 0x950, 0x401, 0x101, 0x0, 0x9, 0x10000, 0x7, 0x2f97, 0x87, 0x6, 0x5, 0x8, 0x4a87, 0x10000, 0x6, 0x6, 0x1ff, 0x6b, 0x81, 0x10001, 0x140000, 0x8, 0xec6d, 0xfff, 0x8ab, 0x9, 0x1000, 0x9, 0x1, 0x3, 0x6c, 0x3ff, 0xd7, 0x6, 0x1, 0x5, 0x0, 0x3, 0x1, 0xf0df, 0x2, 0x6, 0x6975aa7d, 0x7fff, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x6d, 0x5, 0x4, 0x81, 0x4, 0x1b, 0x10001, 0x8001, 0x7, 0x3, 0xff, 0x5, 0x7229, 0x0, 0x5], [0x7, 0x52, 0x80, 0x9, 0x80000001, 0x8000, 0x8, 0x6, 0x6, 0x4, 0xf2a, 0x9, 0x3ff, 0x2, 0x3, 0x0, 0x3, 0x5adf, 0xca, 0x7, 0x6, 0x200, 0xe63, 0x80000000, 0x4, 0x4, 0x5, 0x891b, 0x4, 0x4, 0xef, 0x0, 0xfff, 0xdc, 0x4, 0x991, 0x4, 0x6, 0x3, 0x8, 0x2, 0xc2d, 0x7a, 0x5, 0x5, 0x6, 0x5, 0x7, 0xdd, 0x9, 0x4, 0xfff, 0x8, 0x3, 0x1, 0x7fffffff, 0x1, 0x600, 0x8, 0xffffff00, 0x1, 0x80000000, 0x6, 0x8]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000100)) 16:50:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000140)={0x5, 0x0, 0xd4, 0xfd}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0xfffe}, 'syz1\x00', 0x46}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x8, 0x94, 0x7f, 0x80, 0x0, 0x3, 0x29400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x7, @perf_config_ext={0x401, 0x80000000}, 0x4000, 0x3, 0xff, 0x1, 0x7, 0xffff75b6, 0x7}, 0x0, 0x7, r6, 0x1) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f00000001c0)={0x9, 0x0, 0x7, 0x0, 0x3, 0x3ff, 0x2, 0x7ff, 0xf7c, 0x23, 0x22, 0x81, 0x8, 0x1, &(0x7f0000000100)=""/31, 0x0, 0x5, 0x9}) dup2(r4, r3) [ 952.993167] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, 0x0}]) 16:50:35 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 953.070695] input: syz1 as /devices/virtual/input/input142 16:50:35 executing program 2 (fault-call:3 fault-nth:25): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:35 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000025c0)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000026c0)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f0000000340)='./file0\x00', 0x81, 0x5, &(0x7f0000002540)=[{&(0x7f00000003c0)="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", 0x1000, 0x5}, {&(0x7f00000013c0)="7a500479cd77e5245527ee4633d0f3b41b04f1d43c4bc9a6e57e168108aca2d6b17e8e5a", 0x24, 0x6}, {&(0x7f0000001400)="470feabfd270b77a8c375cb0025ab8", 0xf, 0x9}, {&(0x7f0000001440)="87080a41cc6571365fba79df3302b37653fa6aec0d5a6023f39d17746cb179cccc887bbc81885d4757a55cc2e567698dc9c080a446010c61423843faa71fb7f8ea2cf25a76a0815f0c2c1b57d3415e552e0864e22d19e67ec04baf0ef1d631ef386e76cb42407d754da10d2d2a2ec6cade046f8aa9783400deac45de8abf3d2f5c47bfd9aa2548edfb0307e4acf973b3f8d2e6bb13f3b4a7e4d58fc6b70ab43dd2a6da19658434d634cc88b0d9637f715f1cef867593a5b773209be74c4a62c317fed98f4578bd30923e600b8db30af9e76988f431c3c95b30f4f02526d5cb388132618aa95461ddbff4117c82c1798a0e51", 0xf2, 0x7}, {&(0x7f0000001540)="8b1d4cfd9239b2ff2e391e28a00cef4e37a943433945f12709759099dceed348cc45364d8f5214143e5616bf47dc83d77fd54bff22c552a6e6319a333fb2349fbf85989fe7cafe4ba99426a30d55802543d13390bd882c0ab2b1eb56ff82e183df98eff6dea1c72fc5eaedfe3edbb5cbabb3c3ad5a219e159114511d56c4c79d148ed7876da61bd0a033d405e4aadad16105c456fd8c1d6ab565463e4a4496f1542ef3565ea070fd1db58413445417e4b266f1fa95b7d51505e8bbffd40769b20399e823fc575e7d0c25683efb2dd2070356e9753e79b13dc9bf77f75081a8fc36566b9d0aef7bd1f8941e33435cb5c92303e9c7d83d3efd0bbd8cdc560c3f1f4304d90bab756a01ecf079c12ce9f81e334729f789743ff392d26acc8454823c9cf795cc68b496f5a0d6ec75be3215c28fff152a02aa5605e97ba2e0662d5b99588781edd5d343e100bca694bb72b443e6ce6f5772588278d8e0f0d6a6680de97ddd50ffd2af0f3415f47d50c836e19bfdbfccf1aa54f5c19ab2f7485e62ce53e31f1f752727ed27914d96d97a9d1b6df9d7743ef0fb70dc504579d61146ed12145cade30df5764a5c0fdbe7bfaa50c20cab0234b5b4cf786200e29dfac3156293c158c82b84f0448bd02afc7c49540ac030c417eac63663ec97cfe073fc0b7f4de1e1a9b26ed5f9fda36a9c403e7dac031b036411bee84eb8b4a712e8ea418b58e9baf37c1510e5d7252211102d400ba8f4dd3c8b1dd487f172650c67e45c19b91a9474594d8c3dcc2117e289b5e7c09ca88449d6629cff7e9408af3f19620ab2b525ebf53a2c88677324f64143ed4faad50a436760e29558ad45a9f0eff13f6033cc02912558b0b2f60991e395b64593c0208945c3d618a9a68e593f9c7faee0340c5b44be693318b1723f24e2394e282e1f423a7acdd4582c80d68bae3cdaf291775c09ee46197077e8872b926b30e348ec6a6b390029fb4766db6aa12d305bfca2e0d57ce494624fff2179af8fc116576fb2e9ca9a8159dded81c044e6699997b731bd0597d796c19cb48a4dce6d841138de35d0d88b5e43e1b4e0d62fd1daf772610581bc05033cc8ec66ffcff4f24ae350ab512b15cd9224f61879df43a59117da94ea9ae0ad59b061393aeb5f6fa390d2ed0b8a55fd4319686432b11e1707468f38523395949cc84b0cf5e2860e9b7cfe2834373845f4507b028063305483e0b5b9d261ce85d16f7192e80e24878a2a5676d018ea821cc28de666d2523c288d893edcb976ef961c4c8c555e0eaef65e0e069ac452afba91d86c7f7b91d6aa1cf5157d5cce90ffc03c4940f223a961e9e9b58b671ffa614d8fef397ce90d3348be197b6e161e79982f124b3c2bef27ee4d35ca3e7e475a975e83480372e035cc96dad7f12ccfefb7671edcb1e0400dd5a82c2ee1e71c1097aefa7860e3c931f545d3ac1a349a3a2ba15f31993b7ddc2b2716d4f91e06e6dac2b07b6263b54a120fd59b96b7e5f88fa1406d849f7469a801a1ca4d87777c3a245e45b93941504c4241c30488f867df59a6e1deb53a1a6c574e20a0ec493baeb0364e803a70c98ff81439190e5d670561a8438c0c2432c06bd28d5a5341ebddd655ef01c83f1bfe84a3020ee40c9afe4c42cd276efbc17164ebdbdc370bf7465b65ee5f11c3d4e1544932232bc6d3b0d31b59ce2667e0ee8455f812b47bd5a9b12c3a7f535675637a0f0d3b191503f23125a57e0faa2ebd8e82f09418bcacd3d8cb91fa1d5ffc83320c9efe562fb999bc40bd962ba100770711a8ab49584fc543165bb7a371b869de967348525f0597c34066a8432bb59c617fd4d5167c011695428c61f4371fbd01a4fa695b6e050854723f3c78ba24fcfbd96f1def94d37950e527d61d362b9b660638a2e4481431c5712cb23e4a792f8212194e63ccda1cc02fd5b2b9acac7c71d80a26a428122815b00542728554193a4a3f4ee7a1825e1dda8787319d3c0d54556d6e07acf14c1711414f716bcfeeeb902e570b272502627ef4ec3e764151aab71f7070d3d343535048756eac40d20a89816a6820164eb3537f8a23a94796a757b7c69885eb463b993b5f06dd81cbda4a27f8be35d891d897f7f8bb3838b8fc6a3b6783aed8f85f2d299fa813bd0b89ccd0f0ad11c091063bbc4f6cd6bef58d846d763b49198c0e83087f60055aa21f6afe9242b3ad9586fcbd50b6777474b6dcedeaf390143028e17fb7511c256df2cce278b0b606638b9c75b21dae87bbd7d2ca9cecde4c3b982d9607172a0cd3c895e820bef5dfc22b3dd20f7b7040bf032e2d4ee99ef77c7bf2c9112f95d8d49245d1292c8a03d4d8901269f7bc9763eed6e0f634df31239f8b5f27fb9b463dae1fa3f4e684e616ab5cca7a90c2b7122faf95b65073077ea9445caa2658e2989fcb580bbaac82847aa1d083e5373c39e643a290c8d02577f7f7e08baf556ab36935b10a078363c29c2a9b039e21dc066edc590b05583424d4a6be66f37daa9ca4d74672737bf5345e4e8d3a637cf51254bbeffcb681c293ad600ae2b64dc4434a859721f210f2cab949025bd6d669d5b12ca617a846a5deba2c7bccfbe43502f6a67005a6a063edfcb9db9d174d9f577990cb39a86a50c2a34933a1531d258ecd7f7d14f53ba48f51f4e43a79cf94eb6a3bdd3a7fc48da20391e5163b310ca13ed70444caeab58dbf0853bd494f52da788cae2d973292574717cd8b241cb9933c5ef3d08b07598108c6617c5d2636ac44e7c1883cfab5ab88d70f09c50af13a2549fdf9822b8fc8ae7ff61557d2d45370aaf1fc34ccd4973580e3430839507683269189314a2f43527f7e1128eb62be09d6a3b8b6f9cf7ad3de7a0d6e6e0fc8969c3464332a5b97a2c992fcdc34ce5454c348b64647bf4885a7c3fbe7a34fff9bd626581ccdd076e72cea2d8cfee36c9a014c2fa7de572e64f4a8093957a14420d825644d80d77d75b2243704339c316c320ef4b37f99c31a265984b1d55929244a81794b69fc56fd5f98a0771213b3133af6b95d0ec8b31359744540d471b35568ce20ed2c59149fc0e29b8dafa5c27e2bc1f8d4df1bde6e3ec0a5da6ebc45a75b055fe39e961ef4bccaeb39abd7906607fadfafd743f2ae9fce78a76afafe412c08807d1cbde0e85ae78a7905caf4685297e6987aa70bba779026ab30a7669941d31e8737a1ad2847e9dbff9f9c3e4c641cc569636ececeb1a679ad6e2911deaccb8a3c9d0f7ad79e590acf26803f772b5385d73ba904dbff73b855bfcc6e1faccf0262c8cb3ae9562aa83223dc36423e66ee284244c76dc7b79983f6b14ca14b0c53b20aa0f45900f7472b155d102079e42abd82a5ac23341917b4aed04009b3a48170a9b3f711a760bc01a6e7aee4144637fa0dfda9b608424eed3c555e38aa5ce8c950d981fc16b54a1baaa922e0fb807666930b14401a8ddd80c3b29c69ee31689838cc17984adcd7f37ac635d57295adc933603967275e1e095f3aa410e31bef1b536794e693da47473b55653a1f6788440abfc072ce7022bb86a708cb6c9762d04d0766130e35d975fe0b1ff3476f6b511a8ee8c5f5d30df7b933d99d3f35a7cdc3e57794302d04a0e31b6df99f340885f2489852e6a71e15c060a5887424d5b067035783d215cb8b2a123d1810a804ce376000bacc9932e2839a605cd3c8983957859647ebd9e085e5b4bb224503c24d828573d2d30d65b53bddf4ad55dd1855181a4875b631f54c830324045169ebc82ff1389fd5a3486050a583840b6c6304cb83e4d6a135ce4cd1a8ef5f84d904c6217e3e75a51fefa1bdeec9fb0660cef73e1180c7645291101df51fce77e3e5e731fbe73df1ce8dac4ca3eb7f56ece016c58a5e9900c8d6301c134ddf069d79fee3067aee5ad81a1bb9efabcd083f55b59d1e5e81546afed2614825348d646c42ec2c76a5d3b310483143b27bf8a65209e73982a58fe00db9ce4999e0971fe47f10b5941662a8d46e9be25d9a021fb22442d231f239712124dfb5c9f8205abc505772bdcf14f8c0fb3291ac7fec2f303b70e58848a3a799d27ec1e7c5789932fba7265447ed65864faef79268eecf405f5dfd5d122bdddd8c367a551f00dbb553fe1df547e96e87b518f122d1d454ccb39469da8ec97dd56c3c86e7c1eafa95a64993f1ac8d3ab8c4fe1d4a3a6bd88c0f6715d73e6cec4a04ffcd0f42e0301d509cea35b5e07b0640e15efed273f9538e9b290d8f9eaecf3394fa88ffc68ee7ee146e4066dc4eb612857a4bf83cef66cad8650390a4a5f3c4c4dbd0a74e7fa6e8c0b15e790e31ebc184fdb21466f6fda40f03c4c081aba68a0e67192510a670866a21a0aa03adea6df373597dfc873a37e6a59c27f1aaf010c4001d7c018b63bce3034500635c2ca7cbe8813590832b0a58be86cc05ed6ebf075285f3ee57804aca58aa7d1cb19e5205585e27fa2067f5e11eba8475f2066a6a1bf0329df65432a8f55043ba4af39decdc03c944d68b1c5656a1c85cb4f9b1c8560a337ad82304139523a728fc5f58079de2bb8a8333ed2ce0dadc866ebf9e79b9408f3e2e250f94dae7aa4cd2a285e2f37b6420f885366ae560ebe6d6c88a430563503c5ec2827fd4c8e232e70e20d8177e936c2a93b272f945e19baa9b87bb75dad0d240b5874816daa8af9347b0b28ed7d6071c76e5f94178c3cba04208b6a3cc29f74bdd2ea0f640b68e0f58f22df9e76f11f1bd3510c8bba073d9dd068041525f1a76861d3e6094f7ff0bc5a9ff70ce26bc574001db41849a6a612e8df0f11d0e9afcc51736ce645a7f1535a002b9cd7d9a416167834dfd395e296b6d9b9e39f646de9f77ab75351d2d4961a14dc8b6f3514f1b9705dae789b4db6ed353b5d523230127e38f1425b5c11db02c4374d5f762aa1493e99bdec74fc1cede1aee625b54bc7fda138028c8420cbd6e950c212e5e7e8e830cf1ed1388295fd80037137c3fd54b8454602c49596d8be07c66d637a4091257ec5a62916008534ba6c0d9698d02d0dc4563a5d21c546e99a405b046a85e4f1d9d20554795fa98467ec1d1b706246d13d02ef7593fd2e12367b5763f234ad97858ae86df645e42ecedb6f9adfef8dfd1a4512e97ef29ec6381cc398e4e81405e8242f0389cf3d08a85cf171ca5633f01b33abb92cb5623b38ba205830497a1d51afb8ee605269f44081bdede240bc7cb8824f801e748975ee0f51c357e8016851d479c26c71d5a25a16a44b87eb50cff9a4ada4be6e1833abbd4eb65a64f0c7fa115e02aa32fdcb77ec868c34ee3f5dfeb9419fa79ee13d43679165d7bbcb160f9ce059dba48772889863ebe25b3b137785c35a75d7cc74bb503015753cbf2a1daf52989fd531f533786995110c70d25ec10028b8ec0615be8897b63ecc0f0fcbc20402c41dcf3e752e494ee74ce6de4f884cba21a37807a3afa26f1af8c5bd8f83019dd2f075c2529ca05b29ee6cd594d2091b8c6737e1b046b4966d891ab51cae932ca418ab0a7d85b9c0ccf040989755deaa0cbe3a483185da51e391c4839432cfd86330e5eda5757ccfccee2c642cc5bb11df55d19cd3eef8bf0cfe140d89443c56bdac54f17a0335536ab049e54e6b13f9c318dc759966f90010fbeb6e7411ee545ad156f732bd8e386626c66424d05706040d8d0df714c460304b04b782ce9cd7824e45caf7370705c3b1b335cd52eec32e71be9c5f14079900d404ab61160e6ea82cc4f1a018a2725597aae82b500abeaa7ae7f62c70c7dfcfb245af7c1cbd8514c5c9e7b", 0x1000, 0x3}], 0x1004, &(0x7f0000002700)={[{@part={'part', 0x3d, 0xfff}}], [{@fowner_gt={'fowner>', r2}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x1a,user@}'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x18}}, {@context={'context', 0x3d, 'user_u'}}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r5) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xea1ffc32d807501c) fdatasync(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000002800)={0x0, 0x0, 0x3}) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002880)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000100)={[0x0, 0x3000], 0x80000001, 0x4, 0x3}) get_mempolicy(&(0x7f0000002840), &(0x7f00000028c0), 0x32, &(0x7f0000ffb000/0x3000)=nil, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1d) r9 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000001c0)={0x9, 0x8, 0xa1, 0x6, [], [], [], 0xaac, 0xffff3cef, 0x0, 0x1, "d2b164a8181c3580399a66cf926a8207"}) dup2(r10, r9) 16:50:35 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 953.408566] FAULT_INJECTION: forcing a failure. [ 953.408566] name failslab, interval 1, probability 0, space 0, times 0 [ 953.474352] CPU: 1 PID: 22704 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 953.482297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.491750] Call Trace: [ 953.494346] dump_stack+0x142/0x197 [ 953.497985] should_fail.cold+0x10f/0x159 [ 953.502142] should_failslab+0xdb/0x130 [ 953.506125] kmem_cache_alloc_node+0x287/0x780 [ 953.510720] __alloc_skb+0x9c/0x500 [ 953.514352] ? skb_trim+0x180/0x180 [ 953.517986] ? netlink_has_listeners+0x20a/0x330 [ 953.522752] kobject_uevent_env+0x781/0xc23 [ 953.527127] kobject_uevent+0x20/0x26 [ 953.530933] lo_ioctl+0x11e7/0x1ce0 [ 953.534563] ? loop_probe+0x160/0x160 [ 953.538385] blkdev_ioctl+0x96b/0x1860 [ 953.538396] ? blkpg_ioctl+0x980/0x980 [ 953.538414] ? __might_sleep+0x93/0xb0 [ 953.538427] ? __fget+0x210/0x370 [ 953.553503] block_ioctl+0xde/0x120 [ 953.557132] ? blkdev_fallocate+0x3b0/0x3b0 [ 953.557144] do_vfs_ioctl+0x7ae/0x1060 [ 953.557157] ? selinux_file_mprotect+0x5d0/0x5d0 [ 953.557166] ? lock_downgrade+0x740/0x740 [ 953.557180] ? ioctl_preallocate+0x1c0/0x1c0 [ 953.578647] ? __fget+0x237/0x370 [ 953.582118] ? security_file_ioctl+0x89/0xb0 [ 953.586533] SyS_ioctl+0x8f/0xc0 [ 953.589908] ? do_vfs_ioctl+0x1060/0x1060 [ 953.594063] do_syscall_64+0x1e8/0x640 [ 953.597983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 953.602839] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 953.608036] RIP: 0033:0x45a567 [ 953.611223] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:50:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x204802, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) [ 953.618937] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 953.626210] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 [ 953.633489] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 953.640768] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 953.648047] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 953.667354] input: syz1 as /devices/virtual/input/input147 [ 953.708029] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 953.788378] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:50:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)={0xb18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4, 0x0, @binary}, @nested={0xb04, 0x0, [@generic="0180683932", @typed={0x4}, @typed={0x8, 0x22, @pid}, @typed={0x8, 0x0, @uid}, @typed={0x8, 0x0, @fd}, @typed={0x8, 0x0, @ipv4=@dev}, @generic="17739a1aeeaceba1fe1fc82ea1117e3a6fae4d4758bda52e3f9ec85ea93b2a68f8aa14fbdca5", @generic="7cb5050b1400c8e3faf4755f597a0ce670026c1d540098d647a68872691a217dbda0b3c1ca6c97f6e7cf30579e5d0c3d441342708ccc7d277c2dbaa6c52c61b32c19dc2ac412f93b10e59fca4f5170b953ed0aac5a67c078fd20e485109cfd54b25e954a54bfb0bd0ec6bd90e2a551dd90818a842a094d2dfcb314fd15e9efd71ebbef9df27853f21fda203b32ea5c4504abe97ab09eb1177edfdf54252ea28d6ae3dc4429cc053a362b", @generic="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"]}]}, 0xb18}], 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 953.879302] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 953.913450] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:36 executing program 2 (fault-call:3 fault-nth:26): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:36 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 953.961289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:36 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x9, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:36 executing program 3 (fault-call:8 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 954.327784] FAULT_INJECTION: forcing a failure. [ 954.327784] name failslab, interval 1, probability 0, space 0, times 0 [ 954.384301] CPU: 1 PID: 22780 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 954.392250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.401711] Call Trace: [ 954.404305] dump_stack+0x142/0x197 [ 954.407953] should_fail.cold+0x10f/0x159 [ 954.412127] should_failslab+0xdb/0x130 [ 954.416117] kmem_cache_alloc_node+0x287/0x780 [ 954.420717] __alloc_skb+0x9c/0x500 [ 954.424345] ? skb_trim+0x180/0x180 [ 954.427979] ? netlink_has_listeners+0x20a/0x330 [ 954.432745] kobject_uevent_env+0x781/0xc23 [ 954.437086] kobject_uevent+0x20/0x26 [ 954.440896] lo_ioctl+0x11e7/0x1ce0 [ 954.444529] ? loop_probe+0x160/0x160 [ 954.448334] blkdev_ioctl+0x96b/0x1860 [ 954.452224] ? blkpg_ioctl+0x980/0x980 [ 954.456117] ? __might_sleep+0x93/0xb0 [ 954.460004] ? __fget+0x210/0x370 [ 954.463462] block_ioctl+0xde/0x120 [ 954.467093] ? blkdev_fallocate+0x3b0/0x3b0 [ 954.471412] do_vfs_ioctl+0x7ae/0x1060 [ 954.471425] ? selinux_file_mprotect+0x5d0/0x5d0 [ 954.471435] ? lock_downgrade+0x740/0x740 [ 954.471445] ? ioctl_preallocate+0x1c0/0x1c0 [ 954.471456] ? __fget+0x237/0x370 [ 954.471470] ? security_file_ioctl+0x89/0xb0 [ 954.471481] SyS_ioctl+0x8f/0xc0 [ 954.471493] ? do_vfs_ioctl+0x1060/0x1060 [ 954.488660] do_syscall_64+0x1e8/0x640 [ 954.488671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 954.488686] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 954.517889] RIP: 0033:0x45a567 [ 954.521083] RSP: 002b:00007f22ada84a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:50:36 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 954.528800] RAX: ffffffffffffffda RBX: 0000000020010298 RCX: 000000000045a567 [ 954.536073] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000007 [ 954.543352] RBP: 0000000000000abb R08: 0000000000000000 R09: 000000000000000a [ 954.550627] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 954.557903] R13: 00000000004caa8e R14: 00000000004e3f10 R15: 0000000000000003 [ 954.575057] FAULT_INJECTION: forcing a failure. 16:50:36 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 954.575057] name failslab, interval 1, probability 0, space 0, times 0 [ 954.607841] CPU: 0 PID: 22799 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 954.615786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.625152] Call Trace: [ 954.627748] dump_stack+0x142/0x197 [ 954.631389] should_fail.cold+0x10f/0x159 [ 954.635556] should_failslab+0xdb/0x130 [ 954.639547] kmem_cache_alloc+0x2d7/0x780 [ 954.643968] ? trace_hardirqs_on+0xd/0x10 [ 954.648240] ? get_reqs_available+0x228/0x3d0 [ 954.652752] do_io_submit+0x2c4/0x13f0 [ 954.656652] ? free_ioctx_users+0x3e0/0x3e0 [ 954.660986] ? SyS_write+0x15e/0x230 [ 954.664706] ? SyS_io_destroy+0x310/0x310 [ 954.668860] SyS_io_submit+0x28/0x30 [ 954.672582] ? SyS_io_submit+0x28/0x30 [ 954.676482] do_syscall_64+0x1e8/0x640 [ 954.680370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 954.685220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 954.690411] RIP: 0033:0x45a6f9 [ 954.693605] RSP: 002b:00007fb4431cdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 954.701320] RAX: ffffffffffffffda RBX: 00007fb4431cdc90 RCX: 000000000045a6f9 [ 954.708595] RDX: 0000000020000540 RSI: 00000000000008b4 RDI: 00007fb44318c000 [ 954.715871] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 954.723152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4431ce6d4 [ 954.730431] R13: 00000000004c1e03 R14: 00000000004d6ce0 R15: 0000000000000007 16:50:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'ip6gretap0\x00'}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02692000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x70, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r10, 0xff, 0x20}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r11, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x4, 0x1f}, &(0x7f0000000280)=0x90) dup2(r1, r2) [ 955.007885] input: syz1 as /devices/virtual/input/input149 16:50:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:37 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:37 executing program 3 (fault-call:8 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 955.075645] input: syz1 as /devices/virtual/input/input150 16:50:37 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r2 = accept4$ax25(r1, &(0x7f0000000180)={{0x3, @default}, [@bcast, @default, @rose, @default, @default, @null, @netrom, @null]}, &(0x7f0000000040)=0x48, 0x47bc97bcb3b45f38) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000280)={@default, @null}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:50:37 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 955.348396] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:50:37 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 955.428887] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:50:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 955.508450] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 955.574367] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:37 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 955.628034] FAULT_INJECTION: forcing a failure. [ 955.628034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 955.644825] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 955.717277] CPU: 1 PID: 22884 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 955.725221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.734576] Call Trace: [ 955.737176] dump_stack+0x142/0x197 [ 955.740818] should_fail.cold+0x10f/0x159 [ 955.744975] ? __might_sleep+0x93/0xb0 [ 955.748894] __alloc_pages_nodemask+0x1d6/0x7a0 [ 955.753568] ? retint_kernel+0x2d/0x2d [ 955.757460] ? __alloc_pages_slowpath+0x2930/0x2930 [ 955.762478] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 955.767241] alloc_pages_current+0xec/0x1e0 [ 955.771585] __page_cache_alloc+0x248/0x3e0 [ 955.775914] pagecache_get_page+0x17c/0x9e0 [ 955.780241] grab_cache_page_write_begin+0x74/0xa0 [ 955.785172] ext4_da_write_begin+0x24c/0xea0 [ 955.789587] ? ext4_write_begin+0x1290/0x1290 [ 955.794081] ? rcu_lockdep_current_cpu_online+0x9e/0x140 [ 955.799548] generic_perform_write+0x1f8/0x480 [ 955.804137] ? __mnt_drop_write+0x54/0x70 [ 955.808291] ? page_endio+0x530/0x530 [ 955.812098] ? current_time+0xb0/0xb0 [ 955.815902] ? generic_write_checks+0x1ea/0x420 [ 955.820575] ? generic_write_checks+0x230/0x420 [ 955.825250] __generic_file_write_iter+0x239/0x5b0 [ 955.830187] ext4_file_write_iter+0x2ac/0xe90 [ 955.834682] ? __lock_is_held+0xb6/0x140 [ 955.838747] ? ext4_file_mmap+0x2c0/0x2c0 [ 955.842892] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 955.848342] ? rcu_read_lock_sched_held+0x110/0x130 [ 955.853363] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 955.858124] ? __sb_start_write+0x153/0x2f0 [ 955.862455] aio_write+0x2c7/0x4f0 [ 955.866003] ? aio_complete+0xc90/0xc90 [ 955.869980] ? find_held_lock+0x35/0x130 [ 955.874044] ? __might_fault+0x110/0x1d0 [ 955.878112] ? __might_fault+0x110/0x1d0 [ 955.882217] ? lock_downgrade+0x740/0x740 [ 955.886378] do_io_submit+0x996/0x13f0 [ 955.890279] ? free_ioctx_users+0x3e0/0x3e0 [ 955.894611] ? SyS_write+0x15e/0x230 [ 955.898328] ? SyS_io_destroy+0x310/0x310 [ 955.902479] SyS_io_submit+0x28/0x30 [ 955.906197] ? SyS_io_submit+0x28/0x30 [ 955.910089] do_syscall_64+0x1e8/0x640 [ 955.914965] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 955.919819] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 955.925008] RIP: 0033:0x45a6f9 [ 955.928196] RSP: 002b:00007fb44318bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 955.935905] RAX: ffffffffffffffda RBX: 00007fb44318bc90 RCX: 000000000045a6f9 [ 955.943178] RDX: 0000000020000540 RSI: 00000000000008b4 RDI: 00007fb44316b000 [ 955.950448] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 955.957722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb44318c6d4 16:50:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 955.964994] R13: 00000000004c1e03 R14: 00000000004d6ce0 R15: 0000000000000008 16:50:38 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x0, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000040)) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r5, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$inet(0x2, 0x4, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @local}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000790cc661dff333d9d5ae26f36ca7bf970fe44208f11bbd595b2f6020461b3e0e94167426b2cf30824f99964c02f0e442e927a0e8da71a439d85c7536b5d96a6bae4a6d18f1dcdc562e824028ffda56d978702c69177c1791e1bd069411e5653f3060049cd755d64e24c081cd8e048886716e63e57f40efb8d3591464ec7fb82b322166ad50611ec59a6856e1f5d64d50257c5baf050252240cdde18818126b", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x400800) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2) write$vhci(r4, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$GIO_CMAP(r9, 0x4b70, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r7, r1) 16:50:38 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='\x04\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:38 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x0, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 956.433194] input: syz1 as /devices/virtual/input/input151 16:50:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:38 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x2, 0x0, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:38 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0) connect(r1, &(0x7f0000000180)=@can={0x1d, r10}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:38 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x0, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 956.859617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 956.880118] net_ratelimit: 21 callbacks suppressed [ 956.880123] protocol 88fb is buggy, dev hsr_slave_0 [ 956.890346] protocol 88fb is buggy, dev hsr_slave_1 [ 956.936418] bridge1: port 1(syz_tun) entered blocking state [ 956.944845] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 956.963197] bridge1: port 1(syz_tun) entered disabled state [ 956.991296] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 957.013952] device syz_tun entered promiscuous mode [ 957.019200] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 957.060302] device bridge_slave_0 left promiscuous mode [ 957.067595] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 957.068226] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.165419] audit: type=1804 audit(1575737439.359:194): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1607/file0/file0" dev="loop3" ino=291 res=1 [ 957.200165] protocol 88fb is buggy, dev hsr_slave_0 [ 957.205264] protocol 88fb is buggy, dev hsr_slave_1 [ 957.212455] bridge1: port 2(bridge_slave_0) entered blocking state [ 957.218840] bridge1: port 2(bridge_slave_0) entered disabled state [ 957.228580] device bridge_slave_0 entered promiscuous mode 16:50:39 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x0, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x24806}}, 0x20}, 0x1, 0x0, 0x0, 0x849}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0x16) dup2(r6, r5) r9 = msgget(0x0, 0x300) msgctl$MSG_STAT(r9, 0xb, &(0x7f00000004c0)=""/192) msgctl$IPC_INFO(r9, 0x3, &(0x7f0000000540)=""/4096) 16:50:39 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x100000001, 0x1b5, &(0x7f00000007c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') getpeername$inet6(r1, &(0x7f0000000040), &(0x7f0000000180)=0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 957.367548] input: syz1 as /devices/virtual/input/input153 16:50:39 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x4, 0x0, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:39 executing program 0: 16:50:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:39 executing program 0: [ 957.534467] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 957.572621] input: syz1 as /devices/virtual/input/input154 [ 957.598373] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:50:39 executing program 0: 16:50:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:39 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x0, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 957.646852] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 957.677995] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x8}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) dup2(r4, r3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') write$FUSE_GETXATTR(r9, &(0x7f0000000200)={0x18, 0x0, 0x6, {0x4}}, 0x18) r10 = accept$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000000800)) setsockopt$inet_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000000140)={0x9}, 0x4) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r12 = dup(r11) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') setsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, &(0x7f00000001c0)=0x1, 0x4) 16:50:39 executing program 0: [ 957.760979] EXT4-fs error (device loop2): ext4_iget:4712: inode #2: comm syz-executor.2: root inode unallocated 16:50:40 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x0, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 957.814340] EXT4-fs (loop2): get root inode failed [ 957.824603] EXT4-fs (loop2): mount failed 16:50:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:40 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x9, 0x0, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:40 executing program 0: 16:50:40 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x48000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xf9, 0xaaaad2e, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200003804002019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000040)=""/48, 0x30}], 0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x2, 0x0) connect$nfc_raw(r0, &(0x7f0000000680)={0x27, 0x1, 0x0, 0x2}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000001800)='/dev/net/tun\x00', 0x8000, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000700)='asymmetric\x00\x94\x85\x878\xfef6\xad6\xf7Kh\x95\xfa<\r\x92\x88Kh8\x82\x1d\xf7)T\xb4\xc1c\xbaQ\x03\x7fqG~\x9b\xe7\xf4/\xc4\xb75\xf2\x7f\xc2\x89\x98\xd9u\x10\x94}\x16H@\xa4\xbe\xbcN\x11\xf0\xd49Y\xec\xc6%\x1c\xd2J\xdc\x80\az\xc1\xe2\x18&\x00\x8f\x820x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYBLOB="bc090900ffff0400ff4008007a0006003f0000480300"], &(0x7f00000001c0)=0x1a) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$l2tp(0x18, 0x1, 0x1) dup2(r1, r8) 16:50:40 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16:50:40 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 958.499121] input: syz1 as /devices/virtual/input/input157 16:50:40 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16:50:40 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 958.654963] input: syz1 as /devices/virtual/input/input158 16:50:40 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16:50:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x16}) 16:50:41 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:41 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:50:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SNDRV_TIMER_IOCTL_STATUS(r8, 0x80605414, &(0x7f00000000c0)=""/18) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x66) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) 16:50:41 executing program 0: 16:50:41 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:50:41 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:41 executing program 0: 16:50:41 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:50:41 executing program 0: 16:50:41 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:41 executing program 0: 16:50:41 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x221c0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2000000) 16:50:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x44c9c2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, 0x0, 0x400, 0x0, "ebc2dc56dabd01540b7f35e1321e7713c76d8eda36f240b6d804ee48c3873d7d6d4c7624f31ef9fd667ae0879ba8b88b0fd2283b6ee3139b8ea773488a323a955617c5cf26e553ca0b0d77cba060c71c"}, 0xd8) dup2(r2, r1) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvme-fabrics\x00', 0x440, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8, 0xa, r13}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r13], 0x28}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000580)={@local, @dev={0xac, 0x14, 0x14, 0x28}, r13}, 0xc) 16:50:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:42 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:42 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x80, 0x0, 0xff, 0xd, 0x8672, 0x9}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000380)="c88b0d8dfbda8b1daa336e618d716ac94b750e196c42424766191f3c38161dede63ba6699f54c3b0c425c31df09e31e8cdbe6c9ee468561328418cf6a015d43d808c5e4748d0765cb63b282cf9e629d860ab8165d33a5368aec355161a0ef645dec3c5e7fa2e90cb7f99c3e110961f02d986281fb60394569fcb6dfbd3efbec599044ce3752f051ca9912ae505468284d0ee0882682ea30dc46ec6fd18119f6847d191afa5350436354ff88074058a035df09c62912beaa184301e43126993fbfb20c771b886e2d60878768e467c810e2df12faa3881a5e463e7697e22e17b163b74b47338fa1f42d38cc594e986e8a868a58cd86e8f81d19ae941404890bf9c2fee3ea075df72e2099f886e26c7e08f0ec22ebe7ad8fe4a8ad0a93976794fe16a87d19027a3c92722714b3dd7aeee4b58a7f6ce34010486bed638534f53c4262fa8fa136056d411ed784c44dcb645911e668cafa2e319da09d9544d6272a45b564f8204a93b276610c9058df681ef1a9838f0648b98334af98fe289cfa4a0075eaf442138c60efa76bb72d34675fbf460de01633813dcdeadd181f8504deba2e649f3212ab3877286fc45ee180bd133a626568353764adbf4bb3737f2205dbe02febb4c97563a2e2ddbe27e62c4eced24f74b2d30d15352e0da8350b409cc7e439bb1ca130049e4edc0db4d2e4c7629c2e605c0ac6e1868174ad9969e9dc50c8bd67780853c3a8429adace254d1a37975fc809b63f4aa639818dc0c8a0145225c5dd1129603f4559ca55e3b609751bf3a41698e12d483e1063fb523af53a9782c6b6ce1b2785427ffc20c66cf5224e354cb2d836168b008d7b6d9641589d40d1d2bf4888a2d01c40d773ae2becd3bf0d16468ef47eb838e7f2f053ea4146ed5553fa18fb94f49f86fbdadd227008d6ec6ca4d298a8ed9363c02b112e81ab27b81be254a34af6f9319d6fe7adf79264c4d68aec75c7e1b3535db1360fc0f50b0f66c0e51b2e442c974b89d47ce112236442b1d72502baddafa9bd6b56d218a86f271dbc15c35eefde30abf8896378d9d6c4c1e19f8b60d0d53b4bdf45fcdb4befb5395abf5b0a54db710cb4d9c28a022fc273808ac6fdebfb547f1bf4ce7cc9e9a3c6d392146cab2db0ea622890c1073138c070a943ce8583c0624811cdcad8d34efb5a2893116576dccd49eaa97fb121db843db70344aee11400355f68eef53d1926ca362d34abaa76025002cf618e2d04bea6e6088778c94b7b0b05b0eaea678a3f590921012a6ffcb6cddec925fc77c4c0dd691bdd507cea711fc26ec27bc17c0deae7f5ea0c7ae88468dc82eabd1e20e6ec72d4e89786c6e2361ec83d57c9bd06c570283e42bff3a690ae1eb29e9e9e6d099e9e62e3c5957416cec6f1981e6894d56395f2623956d6e1c2b6815eb64f3d414d438149bce650310d582d974e6606d48cd8028930a99a2d6ff31005be451d7e9223f8c9a09ef48be6ef9e7a321b874d05fe69e0b9a97c6538439d5f096e6699e0b7498ab8c5f5f5b2b568a540fc5561a0add21d618185452cd9306707439af6210a19a2ea14762733b70a486e89539c917abb8749cbe2357269a086450522ed0970d36e2d2836cb0027218753fa25e817255dd1431f2f21148adcde9e8e132086416f219e5b4ef1c30950b8c33e92dc04ee6e4d5cadb0ee04f4acf7b8845443f163067787e88ed5c169c3cc8fdd696f8f42f1296efa750e22e2874a7e104bfb3438612645b05790d1f50c17f288b768ae933de9ef9062a696c79dddf4c33b2d7e51295622547805736dde397aa893d09c343cc2e71cddfe289fbce26dc9527c9c7e9b65e6f1df99fe550e1f6c7f3a289cd64090052a63616d091302bcf3f2ac5fb0cc099a6704c33740ebfc76271a7c5d3f9727cb54ce7f693b9f3f6a02dde4fd117eb748ad60cb320815101c30ae5a412b5ef513e6d94ff9cdc92a0ae219de538f56a6dbb8e7d703ff239a2a0be8c4f1661bf12f079a5f6bc12e52b0147acf2bd5aad1a1a55730eedf63a02d89e84bb397b6d60e5ba539ab42ca7294477c49ef499d4f616cd30056f3e9ea10ef4e8a71260ea0ed9a38919532f7e0d14e745f7806bbba64da057acf0ddceec4bd69552c4562c112fc8e265a07e183ecb36610747bf3aad460a0350559336f5a02ae1323685da44eb6cd54885e2afc6a518516b574cbb389d952ecc665f786af649ec2a4dab15b599d827db8b0e3acbdd988d8c6ffba0635894122285e91217b41c95632422305606148d779c8af923bb36857bfee89540e1b85cbd786c2dda560e76acd0faabf50e2dac0ce420dd36539af307e49e4ff840872c03f98380b45923f1fdccd701050481e201a914e3cf880a5c97c4af0c4c7250d5d14c4666f5f05861b7cfde30c6336ea840a2f466af3c8700945dd4a90fa8482e8e0a58b290be7e40dc49ad0d71b43a25569f78a3eef43cc47fb44943bd9246548b8c6ba4beaf7268b84c5e80ec9940b2a059bec6b6ce7ddef968b76f12c61fe412fbac0b4b27f9f6b0ed2c94058854eb529a250fbe3ae469f8639efe58cdd8c9ece5c1abac9d3c10459b69e2abdfed775df4da07596fb6fd2fb05f1070bb12e6462b4c8d6256542376bf4e999a6a82fe7f9c63c95f4a67f47a76ba84559d866cc4558021a3adf93f48beca16070ec19be6b946920a6f7ed83d9586581a1208cd915dc617a529f624c06cee9fa29f779efc942aaf4ff383e8ed0a8c70a77651b5561068dc454130cf3090362cc2995946688b3f3c0723cfa733cebb52bb9d3f22c9c2f3f529b9212c124a4c25e87d3d47ca6b9df961b15b6379d2b41bc90032aa6449d81a44ad808cdbe1735c3336383c109d7297a6055c642512fa789a420c4fa09694c09f5453391875d61855cc19b9993fa2d550c2ec97ea49c222aad2b8595b9139c71eb3228b7b594dacd7fc56f21c1b64cebf93e23391b15610304c379a683bc3c752300408c185dc7140389d7887c5438a5998b85b6a35fafbe0a56dd25313d25869892c9a2b0050fe6fc272cff1a60546c7bcfe6597957a03b39c3c8e014631b189545ca826e9ab3cf2f339e358a09891f53eb68393bb0c52f737b29a23e6a741646c88e60c0f3ae377bc03c951e10a8c987cc7abce1826770d7bf617bed4b91a9315997c772d79b061e9494c06ea9f2948c4ac2911b19a456670a940414eeb515284a3592f50d3b9204ae23454792ca8a34e0917518aeec0ce840b098856046788fe6713340343c0ab09eb4df194fc43fc2654e796ec1ee6c09efba7c3f2f13393ce02c8e0975634d6e4f80ff9d33528bb5b78a23fc59c0a3e1d50e17e88c0237e32fc9b80ef3143a970fed7f426017996cf0ffe7179f5ee375f1db07333d08fb2538e684996c9ff833491c06d792390934ef225fdc9fea9cc488b5eb5b252b1e304cc4400007726e2a1149a83dc4d8b203f518c5886f91bf805d9800fa42efae849612d42e255a7bc7935323687af068bcb61035dc6949081fd28c81fd103ad3992bc106a992f2d85cf17dcd00567c38912eed712fe8694c269b6dbaacc0144533fe86c9500513de5de0ea6d56bfd3b44d66c9163bcc07b2f71003944bc5672ead31e3aa887b6b15928ca7395c8930b8b58a69ae1ef56fe5deb2bb410e48926fd1e536732e3120763fde6c61360eb53e5ef327b9a95b21f34088f5c58d2ee79d53be85384b321d0417659617ff1206628da9721ae7a67cc86b6c09e6e89e7a1cee908277347914bbb5019b7ef160821519eea79b10bb974d23c8eed51a7404144b5da6e7e4a76d5a5233ba87a19811245c6385df65710a8721a3c7cd546a4a0bb2448121235f73954957d6045532f8893a0a5cb623ddd354c294c894508e01990b8668d03aec50452f4cd1a6e2417ca6938f753a5e59ce2cac25d182302b6f117e6ba14c0bd3b7887fc4d0e7b425ef7820ac27c28a25248749778328c7cac61a7cdbd78a09da03737333b521a4e49eeeeb17fec52ceffc42d4f3f89484ee2272024d51dc85ba0b8e8a738329eb00ed2eaa9476519cd2979770d3d2714feb23ed7894862cb6e4ed36a173ce3d6857a92c8df5339de7274f0544c80e2b88358a96490edcc25f13a13d67103b1326bcde3c723d19f14922e52e9b7f8dda9e14a9bf05467cb1107408f58ca4b87c186cffc9dbc5819341a55b5f3f605b9303a3dff444161b84c279aba1970f231a3d7bf3a6fcb23b98c07242f997246f19416e2e1db2209ee622c3d606adeeaba026899736782dd63570257924cdd5382cdc1d6fbcf367cf8541d0c7f84de5de0f5718ed7306872139abad9337e617d5db3aa3d4740e337055e7e4a0fc2a9c9aeb93c83382d09d11a3f352d213560fb5b231dfc8281aac1ea8581fc8494442c108faf116b390ffbe71c4ef063219e82e2ffa0f56212d216dd656a0a0e5785b41392123af615441aac1f8ce97e446a5081a02cf76466e619fcc09424ce181fc015aa4c8ee3010a2acfbc7cf098fe01261496bc91ca021b8b03822799914fcf7d0c3e94342f8b22cf0260c4277498e727a359af00a5388510dccd55eb962c4d5884aa50a165d9db630f32b4f42170d90f60ba8a788e2478f396011d52e080b22936079c373480c59cbafa1ba00f9cf8cb3b6143aadd2841f15baecdd8fdb58785cd9c4ed31bc10794724f64c57e99c15b322799114afb797b844892f42dc9fbc2c3b0e232d1e8e6af9a423bb496390f320fb6995614f09396d5c804398015037a6a803be866bb78fd67d02264c647f25d4f1346a02952f423bca457c777606fadfe245d97786dd44e3f80b8b37ea6cfb741903e73e2c4d2bdbb4abfc420b280bc6ad0e91be516e6d36ccbbf59511d57a908648c73af08d728f32b5c34d8403634c4c4a58f7b744a80a4d1aba0119f8df7920af0d30cb8d4859b70ae97918bd5cafd28d441c8848bbeee4f424540e3ad2f100803f906f5c7a788006dc7ca92748a41cc876e40b1f51707282f703c97788fd21851382788e890adc23aabf8dae8808cc2313f479a805b25760383cbf4bb41b608d94e175c22bfe09aea1edfef8cf2ff09e6d481151e32088c6dc28d9f0fed56d993c40df4f1d411c67f9c1e7523c93578500cbe96cdf6edd72096865e6886472c5636b79d37715184dca1e9a5a4d252c1a11dd192c407be767e8a46d8ddcc60a861a5d85ba4d9adbecac776286f7e717d1376a1eb95edfcf078e1fa81aedce088cc6c9c8fd8d059eec744ed954a6838b776f8adbe04be45421bbf5577c2193365b907a14e8a28e60fdbb9f89653a089a445e6e851d280a4275a2ddcfcdc576a2a2039a8af9e887f8373105e5fa3c3d95c96e7fb1120976304f105c6ccb98821fe5d52705b3cf99a2ec2c1bf0c1484cd674d81c34a57eaf171eaaf43e0028cda3cc2d677cdaa5d297b619aaf184c3fec07a93f27f3bf31f1958f0b8fb8feedac898275f8f908b53325df4d4240c846f4f211c745d390acce2d678f3917405f2b78222d35ff8828a5bbaf1d4c0de4362396ff71f8be31aac1b64a5a3baa01d7f9ecd2eb194a0e4950516bab53419ba07c42db338dbe0b3f1ce9726101855a7e350ad3276734826ab6012af8f6fdfb195c1c703327158d3fa07b538e8cdff29a7b7f579f4aa2e2c0639c0a931fc424c13d91fd3174759dcaa89ec25a5fc74e9430c81827abbb0e8dca64ec7bdf5cb94627544505508e820b543fddc42eb508ab2766d046f0d23913c2c038c945fd007d4dc68ed9c6bbdce1ca46cfd3604d03a68fbe3a593997") socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x100) r2 = socket$inet6(0xa, 0x0, 0x0) fsetxattr$smack_xattr_label(r2, &(0x7f00000000c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={[], [], @multicast2}, 0x0, 0x6c}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}]}, 0x140}}, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000002c0)=@generic={0x0, 0x1, 0x4bd}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) open_by_handle_at(r0, &(0x7f0000000200)={0x69, 0x9, "99ac6cc1a27d5c485c48f000af35ef9a48325f5d599e034340b934f7c226ed1110de62951be4bbd09a5e462b39502d633d6e08d8606a2298cc215cb76ac7b65bae9fa93e7b11074f9a3efde417ce1a7e1145acd5294ac79c00e1e0c05301387c16"}, 0x120301) listen(r4, 0x0) syz_emit_ethernet(0x2, &(0x7f0000000340)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="50054167c56d93510a68a6d5767a61f2118645af77166c28913a2b27"], 0x0) 16:50:42 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r3, 0x20}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r3, 0x1}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000600)={r3, 0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000180)={r3, &(0x7f0000000800)=""/4096}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:50:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 960.209727] input: syz1 as /devices/virtual/input/input161 16:50:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 960.317826] bridge33: port 1(syz_tun) entered blocking state [ 960.357105] bridge33: port 1(syz_tun) entered disabled state 16:50:42 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 960.383918] device syz_tun entered promiscuous mode [ 960.400688] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 960.418521] bridge33: port 2(bridge_slave_0) entered blocking state [ 960.445124] bridge33: port 2(bridge_slave_0) entered disabled state [ 960.468825] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 960.478830] selinux_nlmsg_perm: 22 callbacks suppressed [ 960.478842] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=23251 comm=syz-executor.0 16:50:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:42 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:42 executing program 0: socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000780)) dup(r0) pipe(&(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000040)='lo:&\xb7`Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') [ 960.518003] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 960.549357] device bridge_slave_0 entered promiscuous mode [ 960.557242] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 960.595930] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 960.691524] input: syz1 as /devices/virtual/input/input162 16:50:43 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000140)={r4, 0x200, 0xfffffffe}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r7, r6) 16:50:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:43 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:43 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x40000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0xc17}], 0x8000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:50:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 960.875634] input: syz1 as /devices/virtual/input/input163 16:50:43 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) [ 961.063685] device syz_tun left promiscuous mode [ 961.079213] bridge1: port 1(syz_tun) entered disabled state 16:50:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 961.147833] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:50:43 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_addrs=@ethernet={0x0, @link_local}}) [ 961.219608] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 961.248177] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:50:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 961.294339] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:43 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 961.355450] EXT4-fs error (device loop2): ext4_iget:4712: inode #2: comm syz-executor.2: root inode unallocated [ 961.423450] EXT4-fs (loop2): get root inode failed [ 961.458537] EXT4-fs (loop2): mount failed 16:50:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:43 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 961.630663] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 961.652541] EXT4-fs (loop2): failed to parse options in superblock:  16:50:43 executing program 0: socket$inet6(0xa, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r2, 0x5602, &(0x7f0000000040)) [ 961.673037] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 961.704822] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 961.744099] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 961.779199] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 961.798362] EXT4-fs: failed to create workqueue [ 961.809862] EXT4-fs (loop2): mount failed 16:50:44 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000300)=0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:50:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:44 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 962.002693] bridge0: port 3(gretap0) entered disabled state [ 962.016389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 962.019013] device gretap0 left promiscuous mode [ 962.043108] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 962.066197] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 962.099667] bridge0: port 3(gretap0) entered disabled state 16:50:44 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x3d27002a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 962.122580] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 962.177822] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 962.229047] EXT4-fs error (device loop2): ext4_iget:4712: inode #2: comm syz-executor.2: root inode unallocated [ 962.240171] net_ratelimit: 18 callbacks suppressed [ 962.240175] protocol 88fb is buggy, dev hsr_slave_0 [ 962.250280] protocol 88fb is buggy, dev hsr_slave_1 16:50:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:44 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 962.283970] EXT4-fs (loop2): get root inode failed [ 962.301308] device bridge_slave_0 left promiscuous mode [ 962.306991] bridge1: port 2(bridge_slave_0) entered disabled state [ 962.308867] EXT4-fs (loop2): mount failed 16:50:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 962.374039] device bridge_slave_1 left promiscuous mode [ 962.388005] bridge0: port 2(bridge_slave_1) entered disabled state 16:50:44 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 962.461518] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 962.474264] EXT4-fs (loop2): failed to parse options in superblock:  [ 962.481172] protocol 88fb is buggy, dev hsr_slave_0 [ 962.481212] protocol 88fb is buggy, dev hsr_slave_1 [ 962.481217] protocol 88fb is buggy, dev hsr_slave_1 [ 962.498108] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:50:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 962.551375] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 962.582059] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 962.623264] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 962.688006] EXT4-fs: failed to create workqueue [ 962.706387] EXT4-fs (loop2): mount failed [ 962.783547] device hsr_slave_1 left promiscuous mode [ 962.825130] device hsr_slave_0 left promiscuous mode [ 962.894363] team0 (unregistering): Port device team_slave_1 removed [ 962.918178] team0 (unregistering): Port device team_slave_0 removed [ 962.952244] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 962.996358] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 963.109664] bond0 (unregistering): Released all slaves [ 963.120124] protocol 88fb is buggy, dev hsr_slave_0 [ 963.125358] protocol 88fb is buggy, dev hsr_slave_1 [ 963.440127] protocol 88fb is buggy, dev hsr_slave_0 [ 963.445269] protocol 88fb is buggy, dev hsr_slave_1 [ 964.320149] protocol 88fb is buggy, dev hsr_slave_0 [ 967.280168] net_ratelimit: 14 callbacks suppressed [ 967.280174] protocol 88fb is buggy, dev hsr_slave_0 [ 967.290292] protocol 88fb is buggy, dev hsr_slave_1 [ 967.600197] protocol 88fb is buggy, dev hsr_slave_0 [ 967.605428] protocol 88fb is buggy, dev hsr_slave_1 [ 967.661022] IPVS: ftp: loaded support on port[0] = 21 [ 968.480238] protocol 88fb is buggy, dev hsr_slave_0 [ 968.486757] protocol 88fb is buggy, dev hsr_slave_1 [ 968.623919] chnl_net:caif_netlink_parms(): no params data found [ 968.656669] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.663373] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.670916] device bridge_slave_0 entered promiscuous mode [ 968.677791] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.684614] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.692162] device bridge_slave_1 entered promiscuous mode [ 968.709158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 968.718569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 968.726253] protocol 88fb is buggy, dev hsr_slave_0 [ 968.726296] protocol 88fb is buggy, dev hsr_slave_1 [ 968.730177] protocol 88fb is buggy, dev hsr_slave_0 [ 968.736612] protocol 88fb is buggy, dev hsr_slave_1 [ 968.757752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 968.765085] team0: Port device team_slave_0 added [ 968.771146] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 968.778469] team0: Port device team_slave_1 added [ 968.784190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 968.791997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 968.872397] device hsr_slave_0 entered promiscuous mode [ 968.930485] device hsr_slave_1 entered promiscuous mode [ 968.990839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 968.998372] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 969.013536] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.019921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.026836] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.033265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.064335] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 969.071424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.079707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 969.088796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 969.097203] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.114400] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.124504] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 969.130939] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.140080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 969.148779] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.155346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.170352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.178093] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.184491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.201024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 969.208794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 969.217881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 969.226112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 969.234301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 969.243144] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 969.249329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 969.263093] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 969.271113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 969.277846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 969.288651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.610486] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 16:50:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00\x00\x00\x04\x00', 0x8011}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000008000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 16:50:52 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x8000, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:52 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x3f) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x70, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x4e24, @rand_addr=0x9}}, 0x7fff, 0x4150}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 16:50:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r6 = openat$cgroup_type(r5, &(0x7f0000000340)='cgroup.type\x00', 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000200)={0x7, 0x2, 'client0\x00', 0x3, "771a667299d688a6", "b9d6f610ab4b3467cb5d0b2c3ee2ffffd6e53eb825900cc9b9fe4eba431504e4", 0x9, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000000c0)=""/168, &(0x7f00000001c0)=0xa8) r9 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r10, r9) 16:50:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0xef}}, 0x1, 0x1, 0x4, 0xfffffff7, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000400)={0x8fa6, 0x2, 0x3, 0x16ca, r7}, 0x10) io_setup(0x4, &(0x7f0000000180)=0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r11, 0x2402, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x404080, 0x0) setsockopt$inet_tcp_TLS_TX(r12, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "5c16f0c1c6c2904b", "1b8ec282bd073c668f4ea21685389608", "1ea43ab6", "9769bfb101bb27ba"}, 0x28) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r14 = dup(r13) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') openat$cgroup_ro(r14, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0) io_submit(r8, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 970.613211] input: syz1 as /devices/virtual/input/input167 16:50:52 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:52 executing program 0: poll(&(0x7f0000000080), 0x20000000000000b7, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748ae54, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) shutdown(r1, 0x0) 16:50:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) dup2(r2, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') write$P9_RCREATE(r4, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x50, 0x1}, 0x3}}, 0x18) [ 970.818634] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:50:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:53 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 970.901604] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 970.928390] input: syz1 as /devices/virtual/input/input168 [ 970.939550] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 970.968973] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 971.039737] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:53 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0x0, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:53 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00526) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r0, 0x0) 16:50:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/WB\x8b\x00\x00\x00\x00\x00\x00\x00\x05', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='\x00\x00\x00\x00\xab\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x20280, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) dup2(r2, r1) 16:50:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 971.430116] audit: type=1804 audit(1575737453.619:195): pid=23502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1608/file0" dev="sda1" ino=17230 res=1 16:50:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x402282, 0x0) 16:50:53 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0x0, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:53 executing program 0: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000180)=""/233, 0xe9}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00500) shutdown(r1, 0x0) shutdown(r2, 0x0) 16:50:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xfffe}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) capget(&(0x7f00000001c0)={0x19980330, r5}, &(0x7f0000000200)={0x1f, 0x7, 0x20, 0x10000, 0x20, 0x4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8000, 0x7dd0}, @mss={0x2, 0x8000}], 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400a01, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000100)) accept$packet(r6, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001bc0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4885}, 0x42014) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r16, @ANYBLOB="00000001006272696467650000040002000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000090}, 0x80166) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r16], 0x28}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r8, @ANYRES32=r10, @ANYBLOB="000000000000000008000a0091c25b71881a94", @ANYRES32=r16], 0x4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x900200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c00)=@mpls_newroute={0xec, 0x18, 0x0, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x10, 0x80, 0x1f, 0xfc, 0x4, 0xc8, 0x4, 0x1000}, [@RTA_DST={0x8, 0x1, {0x80, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x81}, @RTA_NEWDST={0x84, 0x13, [{0xfff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xe445}, {0xc0, 0x0, 0x1}, {0xffffb}, {0xffffa}, {0x8}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {}, {0x400, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0xc0dc}, {0x9}, {0x5c}, {0xff801, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xf2, 0x0, 0x1}, {0x50, 0x0, 0x1}, {0xd0}, {0x4}, {0x0, 0x0, 0x1}, {0x4}, {0x4}, {0x7, 0x0, 0x1}, {0xd78, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x40}, {0xcb7}, {0x4}, {0xff}]}, @RTA_OIF={0x8, 0x4, r7}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x9, 0x90, r16}}, @RTA_VIA={0x14, 0x12, {0x9, "7de2b6e775e80134bea17ee002e5"}}, @RTA_VIA={0x14, 0x12, {0xa, "22c8ca99430cf9cca0fadfd85594"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20010800}, 0x0) dup2(r2, r1) 16:50:53 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r5, 0xbfb}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x5}, &(0x7f0000000340)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 971.701214] input: syz1 as /devices/virtual/input/input170 16:50:54 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0xfffffc46, 0x0, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f00000001c0)={0x7, [[0x1, 0x1ff, 0x9, 0x0, 0x3f, 0x8, 0x3ff, 0xbd75], [0x0, 0x2, 0x3, 0x80, 0x3, 0x0, 0xd, 0x3], [0x40000000, 0x7fff, 0x5, 0x100, 0x8001, 0x0, 0x0, 0x5]], [{0x1, 0x9, 0x2}, {0x200, 0x5, 0x9}, {0x6, 0xffffffe1, 0x9}, {0x7, 0x3, 0x9}, {0x400000, 0x4, 0x3}, {0x8001, 0x2, 0x5}, {0x8, 0x7, 0x6}, {0x0, 0x742498f7, 0x2}, {0x5, 0x7fff8, 0x2c}, {0x3, 0x9, 0xa}, {0x82, 0x81, 0x597}, {0x5, 0x26d7, 0x8}], 0x7}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b, 0xe5fb6d6ef615b5b9) dup2(r4, r3) [ 971.853584] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 971.893138] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (8100000) 16:50:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/98, 0x62}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000001a40)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 971.949239] input: syz1 as /devices/virtual/input/input171 16:50:54 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0x0, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 972.127674] input: syz1 as /devices/virtual/input/input172 16:50:54 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0x0, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:54 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a57939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x93, 0x9}], 0x1207001, 0x0) socket(0x3, 0x2, 0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40000, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) r10 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xf}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000280)=0x1, 0xfffffffffffffe31) 16:50:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x0, 0x80}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) 16:50:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 972.274637] audit: type=1804 audit(1575737454.469:196): pid=23591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1609/file0/file0" dev="loop3" ino=293 res=1 16:50:54 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0xa432, 0x0, 0x0, 0x0, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @loopback}, 0x4a, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='vxcan1\x00', 0xffff, 0x9, 0x1ff}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4201, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f0000000200)={0x9, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000100)={{0x3, 0xff}, {0x24}, 0x5, 0x1}) r9 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) exit(0x1) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') write$tun(r11, &(0x7f00000003c0)={@void, @void, @mpls={[{0x279, 0x0, 0x1}, {0x5}, {0x1, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3e4, 0x0, 0x1}], @llc={@llc={0x6, 0x2, "ea9b", "e38fe1289d565017e670679b156be03b9dbf6fca200e5b933d115a2b30637c4de3b13b79165c9c0e01f4b8cf295555a4e5f36d3ffeb252dc0e5e86da0820f4839eef7d49fb998f4ced6b8e3d6dd3566c7b0447a4cbcec3d301a62d188f40f7efd5d5426eb0485c866d3ffb4768382b"}}}}, 0x8b) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r12, r9) 16:50:54 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10003, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000180)={'veth0_to_bond\x00', {0x2, 0x4e20, @loopback}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 972.609073] input: syz1 as /devices/virtual/input/input175 [ 972.650144] net_ratelimit: 24 callbacks suppressed [ 972.650149] protocol 88fb is buggy, dev hsr_slave_0 [ 972.660284] protocol 88fb is buggy, dev hsr_slave_1 [ 972.745298] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 972.786959] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 972.829520] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 972.841626] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 972.862193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:55 executing program 0: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000180)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}], 0x4) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00500) shutdown(r1, 0x0) shutdown(r2, 0x0) 16:50:55 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x9af, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 972.874934] audit: type=1804 audit(1575737455.069:197): pid=23692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1610/file0/file0" dev="loop3" ino=295 res=1 [ 972.903144] protocol 88fb is buggy, dev hsr_slave_0 [ 972.903194] protocol 88fb is buggy, dev hsr_slave_1 [ 972.910138] protocol 88fb is buggy, dev hsr_slave_0 [ 972.918711] protocol 88fb is buggy, dev hsr_slave_1 16:50:55 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000029366d7e31c21c89b682460800", @ANYRES16=r3, @ANYBLOB="000026bd7000fddbdf2501000000000000000b00000000797a3800000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000400)={0x0, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000001c0)=r5) r6 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000040)=0x4, 0x4) 16:50:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:55 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='\xb1j\x01\t\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x100000001, 0x472, 0xff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r6 = accept$ax25(r5, &(0x7f00000001c0)={{}, [@null, @default, @default, @netrom, @rose, @default, @netrom, @rose]}, &(0x7f0000000140)=0x48) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000280)=0x9, 0x4) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/188, 0xbc}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000180)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00500) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f0000000240)={0x0, 0xffffffffffffffe8, &(0x7f0000000200)=[{&(0x7f0000000180)=""/73}], 0x5, 0x0, 0x17b}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 973.185905] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 973.197049] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 973.207844] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 973.217536] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:50:55 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 973.237200] EXT4-fs error (device loop2): ext4_iget:4712: inode #2: comm syz-executor.2: root inode unallocated [ 973.275385] EXT4-fs (loop2): get root inode failed [ 973.309722] EXT4-fs (loop2): mount failed [ 973.405081] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 973.433725] EXT4-fs (loop2): failed to parse options in superblock:  [ 973.474003] input: syz1 as /devices/virtual/input/input176 [ 973.495212] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 973.520697] protocol 88fb is buggy, dev hsr_slave_0 [ 973.526352] protocol 88fb is buggy, dev hsr_slave_1 [ 973.561807] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:50:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0x7ff, 0x9}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000140)) 16:50:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:55 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 973.604678] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 973.667713] input: syz1 as /devices/virtual/input/input177 [ 973.669525] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 973.742832] EXT4-fs: failed to create workqueue 16:50:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 973.768868] EXT4-fs (loop2): mount failed 16:50:56 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaac9a, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) time(&(0x7f0000000040)) 16:50:56 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 973.840788] protocol 88fb is buggy, dev hsr_slave_0 [ 973.846756] protocol 88fb is buggy, dev hsr_slave_1 16:50:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xcd8a5f76415b3c78, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r2) 16:50:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 973.997111] input: syz1 as /devices/virtual/input/input179 16:50:56 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 974.109140] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 974.136278] audit: type=1804 audit(1575737456.329:198): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1611/file0/file0" dev="sda1" ino=17243 res=1 [ 974.188750] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 974.239030] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 974.257452] input: syz1 as /devices/virtual/input/input180 [ 974.298241] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 974.325230] audit: type=1800 audit(1575737456.399:199): pid=23833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="file0" dev="sda1" ino=17243 res=0 [ 974.357945] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:56 executing program 0: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x3, 0x0, [{0x80000000, 0x0, 0x0, 0x0, 0xec, 0x2, 0xb46}, {0x80000001, 0xfffffffa, 0x3, 0x0, 0x40000, 0x9, 0x6}, {0x80000007, 0x0, 0x0, 0x32, 0x0, 0x0, 0x5}]}) socket$kcm(0x10, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) syncfs(0xffffffffffffffff) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0xfffffffffffffcb0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:50:56 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x0, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x3) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r3, r1) 16:50:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) r1 = timerfd_create(0x9, 0x800) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fcntl$notify(r1, 0x402, 0x80000026) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0x76656f) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000140)={0x16d, 0x1, [0x2, 0xff, 0x9, 0x100, 0x2], 0x3}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$VIDIOC_S_AUDOUT(r8, 0x40345632, &(0x7f0000000040)={0x5, "d5cb7cd69cfb6be26142856ab8527aed6a9363c87a23cd8f38ec99da95bd5853", 0x2}) io_submit(r4, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:56 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80800, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x6}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 974.475796] input: syz1 as /devices/virtual/input/input181 16:50:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:50:56 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x0, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 974.618481] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:50:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 974.704263] input: syz1 as /devices/virtual/input/input182 16:50:57 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r1, 0x80c, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002980)={@mcast1, 0x0}, &(0x7f00000029c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8, 0xa, r15}]}, 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB="001000000000000008000a00", @ANYRES32=r15], 0x28}}, 0x0) sendmmsg(r2, &(0x7f000000adc0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @empty}, 0x2, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)="2dd4a45c331723ec7241634708704591dbe851fc6381eae68d71a3c84e43af0917e2a61afcd09b9c1369819a4b00", 0x2e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="b08f4ecbb93b7a72e7859e34f49142a388dee7f0fdd7fa3a3a98285699e4c8aaad0355b7c5c29ec63dd9266525eaa497c11f30c326dcc11dbaae73bb682ec3a4771e45eab4aa1a2515df4fda275b63a7047a32f5292dd5f4a4eebf94ef2a7a0dad068ab6ac7f8a802f198b57d016ce6a9fdc9109258b16006f282cde10269b19901d78760cf9c5f5a6ef94678ecb3b84337abb10b561b9316b1205d3d82a7c3bf900d28bc0b3ed91d3598b9fdb35f4f9a371df42faabb8290653c20973190fe2947e5ebcadb071ef146e81b293669789f50cabc1eefa8528d3534b0f549b1b1d1b4099630f6321fc26fcc77091da26728397b8cfd530f1b4609c3baff2e2a55324d420fa4acb08d0638e238fe476e7be2974fdedf6285e7c5cd62813d53b3b9886df201803253cc0b8927a851f9d2c57d3590a4a57e8891ed834ad1eeefadb050913362a57ec3b4f9149c0b4d4bc79014a26210f800b9a959f3f5c446170359a91737e47b9aa2aefc7b7374de6861a19bfb7bdc444a2b4d77a6879c50d2894688404ee5af0b3f1c78c8945d721d5f11ebcc21d687ff0b98a9e544e1fc6bf373ea05ed615e3f7221ebb4ed213a362f8bbecabe20f8ff13bfd6fec1556e18fe08ad0b990c0540b32dbf84c4136fbab4b3c4e76391beccc210783af0748c0146ba52a1eb60a03857223e72ce416cbbd8ffa5850ca8a6010aa72f6bf15e20ff17e691915d10389bc40260f3febed176d26eb08378c424d693e69a09788e0c45a21cd2f8e0baddf8e8a1a8c8a03fdb7316f53bb7352617b4b2eac06496d63d61c00ae41b9e77bed1f37cccee24c8fc408f6aca1a6269fabf1383c312de65f51ebc6299199f1db4afa7e821b3e7350d5a414be7878647c1fb3e56587ef0ed132ae31c71c156e8386e268f2b0a1cd9eafb2bf5687b4c81437b2d1ab750045ae05e479683d01acd2139916cf69ee2f757b2a663cb9d353ff43b9ecc70d7be3c13e1d6fa6c277618e8e19726b16fa43e56db0f9806761c3b64c6b0ca103242a525d96c5dc5ac6ec4614b1c1c8f717179614fc989f1fe52e6c6cbdb7dd35ed00bd4148f989fb2adb8a3e4da27ecc815ef11804ea22dbf858ccaf41e5467ad1495e072650ba6a66f33af2be5853d8214a1b475ce417d9da4ff9a864b65e6ed79a5899d24e8a9455d661c49d4855a9cebafe3dfc8e8445fa88bcacdfd497690a923e71695c1a80c1a0716ab3c29bca55bccbd539aaef9e8f86e704a876da584451488c113c9a9d989068a15b749ef701752e6e5f050421265fc66b100141275ec0bb988bb8c969bddf2000730262f536b4196a7ee6c48f5e102dddad2fb50ec63291e6b0c4f8af371a0daa6da8b47f44c9c94858372f5d803ba63143f1edd38fbf510e01187e8555bcb36a3d32992a49fb4b284eb5819f772f6c37ce3c601d4637de554c3b39fdf5fb12638fdb732b0800a41f3903e534de3a6b7c7a4a116ae2d84080f98fbbdc6cb8acd7e11ddd92bc08440a53639e31a381df0613c6dc03df690b2fb2010e3590e5527f1a879e8a52ee661628cda6db5ee036726f103e14bfb0c9f0bb66a79916fe1279ed05e3d754f7a9ac985564510d04eddaa91d623253358026f706d97ea93d65758ec302645c420879fb64f80eeffa0cb3cf077be765644b4a6e0d47be08a24de5a2ddcf2474ed84c38f37596f905d8b1238b0338fdc95060531a8785d813a5a285b304bf382160835fa6f3c7013b439c190d32fa48d15fb7779205444cc03c2889a35a28ea02e6f04cd57a0324d69f4653be9a89970f70030a1b7f2824b4942064d9da54f4cbbb209bb88f40d51f53ecb5056e9ee0eca3ec18fdfc65d966dc985eee5610caec845f07a79f61c9f220518e4832101bd0f65dbcf2fbd651eea9591c8dbbdf41b757d07c85121f464fc520f36f8bd8b8b0f2fae0fb1c8d1b7e91e8415eedcc073b0c9cddbde41a0f2e3ad545e337fb521b2ffcffc53bfca4547f6ab33fcf5837c6e7cdd0b0fe0b4cda3e5ca2ced31daffb5dbdbc885f84de451bfaafb25b04aa264a248d9f2524247c54f2cba3a46d9b6b25fee1faab81b0f01c83fd4d47a894ca76b3faf214707e4693e039e35899044cba31972950cd4007b5595362eca3119bb835a7d7d427ba4926fd389dc5d004e5bc7fbbc97c15d126e6a67679ddfdf4e89627f17654651927927f03602ac6c82dea263cdb3372c285e9fac7304d62eb7d81297f9be3d46993c9e0d77dcb9f1cc00d64709f8fe4bd9528c434a7dae6bfd0837b49051ce35948a2164cd29f8032bf9cac942024e16f07660e1eba923c58c2f2e69b2f5e6a60c226698cf2659be98b430c25c97baae599ebb8f713cc63cbe66bd52329a84634c254e0a710fffd5ec889e2fde1944709a20220051ca7883c865cc04a86f60572d1ac42eba39396ffb6c545eae818c6940593e3c329e119bd1605ff74484fbc61ffcdc715d3606cebecdce6246899ff0444adfcdc6a19ae5d24d459e7d6aa3fbce0d2e259cb11630966506f267c53c4b1ef17811b05900d1eed31f5733160751bb9e80a3179b2dbb74548e94288fc3c78beda1822081f62f838a149dd20a244ae0621f2f7fa3a86344b3508bb84e03094a5bc53843196a59203c04a49fa92a4bb4cdb8c72df3171e62fe39d86b82d31a7ed6916e01737845bfde038651370fa00b2e42b038d497328fcaf1be4878537c13d6a8557e30330887dea5aa3b53b359d05eb69f12933e834b24418c82f0ffa34de2b717e52f041b4a6a8f6680000ea96cec3058f80e560392f814dbb6704117404b9ed91d97faad1fc43a303cf0217e4ceead9d70b253334ed0305b4a044e410e15a80f6e52ba833c3baad971263d6d932a140bbaf77c999bad280d2476b7884d8db72a4a4dfcb89438addfe5ba0784106d1e324cf732b7844dc23f01eb31165283de557792247963e0943eb56f96a731c9f040b8a9113bfa26a38632dfde25c636f7555e49d4c21ec70dce09fac9a79bb92f4e14a019b9b5e737c13b60073db91f3520650cd265a8c57d503db2d36694a5c6c771aedffa246141d03a896338feabdab5b50e034f0ba162ea7d85bfecb9b2e31f313722ff085d25aea2399e8dac5da1011dc0fe3b8b82d8d1dd5125932e6f468440de332f151534d269cf16fe20cccd1b021cd4e232c161c6d19c174e3aa7e46e0076569262508697c7f69e7a1d077d1fda36ee12990b2262f5cf689b665c1f1a1f6e28a70bda6a89f2b697d88db62a65d6327b44ff67b1d17d84cde5a211bc726484bcf725e9965b61722448de4faa50d05e920317e34506c3fdb251132ef53b8b7e60e3463142dac7545fdbf11096b7e2538fe4893fc421f1d6daad32f55b9307747a6b2725ba75934545e79914cbdfa71571078cd53e6ad742b1c2dc3ac24dbb92c746ba3759a5e0007a5e543528e74968dd638438ff14da5ed3439a1edb59595e7147025b2d1a38808f09487eeb26399c91423b0d01c557cd85535b6524cef434df6139c55b4454b16ba36abfdd48f8b924f20d189c8509796f222d627d05f0994e64ad237fa93f24192b24e3fc639f337edd7107fbc1ea7b506fd9d4a790b218b93a36db98a453f572b57d1e74054a238972119b41eb89016003c4be0e22742c350d3d13426742bf9c0e3141ead9095e32dcbb5f1ad34c83f171368ced1a032491e0d4473e900b123ec067bc3e648e46029d1ef00ab40105c1f305061b51af5eed2a91b14de897a85e283bea1fa6e0032d0ea4d405a0309bca5655b74717d7daccf5554e15405608590446ba8f39e0df0c2b264e750e1477a8ab284576e1915ba3d78928be31f3b9849a7a91733aa32e20900f1029361402272bc277ccffc65255472a72ce3d255f0b3f7290858adac69a8726b71699f72818004931864ff6d8b449544fe8d60e6cb16ece07183314f4e95a050f0efd2ffe11d2de08022d9bc132873a96b59dfb8809fccc7ad6c551b15445bc0fad76f57889a025c4a2b4e47d539e88456dabbaa0ff81d092da103f480f68cf9eda1404590dd7b516afea5060f1942c42f6e1c9ebfd0f79b4abc750f1372aecf7aa335f73ada51d87d75ed2b6ed0d78897afd6b98dd4fa9306bf2832aa3ec924282cb6d648e0139f85c832b9dfa52f83a30661254e3a8a6ff08187569dee3d89a55d83d085a6d323cf51bb740c3525d69293d6374539abbbffc5834203f2c164e49af08ce67b68fd6257bae1d9947b5c986bd7c5aeac13f8d577414385ae11c69dda57fd722e77934dd401ca20d55be7f5df69a72876c367118d0b7d33b38815363c335e2b04b8caa617291853becb5332a477dbe085950c92e3bc92c036e943c5b0d6b81db6461f149cbfa30128d0a18540127611cf360030c9b6e097061b624cb76242ac22ce44e98caaa8eadbc8b4f4819381d8532bab1794f1ece3e629b2804e05d195ad6e320445ee0092b6d06849bfd29d2292bc3918c21815c29fea9ba7503ffcc9ba20db853e01eb937e000d5aac58a0a72bf4224d166e25d79b6b2120d7ce904c51a35931a0b3c064ab22a162a60eb7cc9c12971a08361b9dee243671e2a42246858a0d710abb6214bd0de6437e05866f6a2a1ae7c067edc2c3d1cbb6ab65846b03f7986a52e4fe02db03031a934aed9db68a1096dbe2028ce34a3338e726e421dafb1ac52a92b5baac5614085577db97c2bdd00e404a0b1164afcdf693e49a5e9cbd11dc8f58e1f742de16379816d76c04df4e77b249194b7384521b14b2a3f626624e75202742252c5b09ffadae3d5989134fd81acbe94e8b2cc994c771849ef633abddf1410515679f951c5ff6966162651bae59510344ee87db3fa9176b2724eef6646719ed5fbb14416652fa3ff4d6c34e7c892292e21077fdae9af1f97e128d5f20e21c6d3f2a6f8a8f3d767e7133ecee05b6afd733136a9d44a8ad49822e64800cf73394ec7566bbd658ac21f7412880cc993d55a0edd13612fa544e6672f9afd32a8a4792f24784d227d0b3cef563f819e1a982dc4064a850ae73d08460ea5962425ffe37b2b9ecd71f1e7c1dcd96eae0487ca6a88c113aaf08d25e4700c01027b932239f9cc13839ce598336629592991dd2de9009096be09f9588f5e3a82d22898c79fe976b8a3184bbdb1ac98d83db70ad5af5bd319146230bc9420253b956f1232fa809ee5f6e1c93620a3402c68f9a94114bfeab5555f318045ca78189a85dfc622c25900d1b522f393a5d351fb02b47a0f36b1d50f8d8959662b32bacdb27320d6eaac56c7f322cca4c99bda4e412df004368dcefc8951f1c2bef75f123f3b7429e137bb45d2745cfdc4e578d52151d0624d7010e0c165565ec281cadcede84d0d3b0eb2be26b9afb7a5aa536c6314051e2fe13686c90c81d05724e95a8ddb21e3e0ee1d75e6f56306ca707f461a85dfddc6bf93bdf7b3164f1a7db17e5abba8153b67264a8b48f41c8711ba7d09f96f4e7716877e39f52c4973dfaffe57e1be5b9931c240f2b7d334f7ff43ef9048c195d48daa4715868edb605e442be6e2668074bc139e6be0e939bffe251f9a0fc449447c7d4f352a6f20eb755df55e87c8b541a04d2fd7cca84192bf5f94bf17747e5b077ab21ddf6255f9cabaa4fe76d6cdd4e651d0e9715ef2f8602f3c7971070889b746a23f0b6bbc080359b963527e467d2fde94fcf3b707e90fb245a84f6fc3125eebb5d74926cf4bb34cbe46c026cb14918775106564a4cbf769936e16166e14bae89c6d455190df7b9d628e2ae7f7c4288a2a5d31f3950f", 0x1000}], 0x1, &(0x7f0000000340)=[{0x98, 0x0, 0xff, "ec12714fba54d3a634317df948bad38b62a3897a123016b7f34ec855efcf2f5c4c220eed25ad739e73ef63a9fb44321b9fb3614e18f00e8261e4b7cd272fc019429c9667158f2c3cc0735b1b39fd486bb4ce0c49b2b14dee428867042c91c45945c001a0b2bd49be1558001934ce5ed549449eefd38b71c946d85f56282f5b067b1491872c"}, {0x18, 0x84, 0x5ef, "71afd42532a1edfb"}, {0x60, 0x6, 0x0, "ac6b87a66fae276c762b0ffd356c5263a5663e3133853ec67d38827f01aa37246e72311c1330a0d8cadccca29daf4e73c1cf5c7de9a015ff6acc90d786c41b078eed011a6b81dbbe3aea1a2cb9c9df"}], 0x110}}, {{&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @rand_addr="db5bb8536b65e793a08ab7211744123e", 0x6}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000500)="5414f7883c6e8ebe732c1666f5cd11977d4d3a4fb2132a88ea000f6052a471193a344e6657091fb15cddefc22bdfba4249d692f056245df7", 0x38}, {&(0x7f0000000640)="851bb6c488120cdbb011562f45b4e8dbf0083fb80d9fd5d914c5b6841836ebf13ab435880c9f0e05fc8f1b46ffeb45287a992b2bd90a6e043847805af4d5426acec2186e6457969612aa563849449d622d2f9c369ef98d4a77072305b8def75e43b64305388d94b50342971f55a47891ec7172bef30773b1623073743830ffbf5d1c5fb3c2301180ca7079cbcb72699e154b069a1c57a192f580c5a190a556cc0c0efc0ea0d6", 0xa6}], 0x3, &(0x7f0000002800)=[{0xf8, 0x100, 0xaa, "ea8a164e8b9d5004f0b03696952168f2aaeccec1df8ea1c6c1f056dc95f8f3c0c412102c20d59488d20f8a01392f5ce2738154ec5831a8a4b7e6285a0cd3239c5a630c1a0f53d32fd17a8429f958bfffed14755bf4d40c66eb4767e91f7f8a2dde033fd0f3f5c886e403027f4106a04343226f9eeaab7a4353a729c756e649d85ec06bc6ab095efe57d2a6d2e82e08aef482175e7d4535221edb09efeac37e9d7db34146ef232a2dd4a4bfe2f2de4f04faa03a8b1a756fa2c61897c32c3d81f65016ccededfdc28c0b90c4bdd96544cc75cfb586b24f4c0be10a5e14b173d3cf38e6227d"}, {0x78, 0x22a, 0x8000, "dd5c4350e55c027f47707684716e96776fbc9d4d3962210530ad07b8ca752e21f895b3fa9a5b461a2fc189fd2ef3e569772b32ba291f4cb54d3b4896dbb4866d858b9b4e5c880bbc909889052154eea8e70cd148e466e58fe085ffe982bff221f31ff1"}], 0x170}}, {{&(0x7f0000002a00)=@ll={0x11, 0xe0, r3, 0x1, 0x6, 0x6, @local}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002a80)="6596280d8cff628d299d7a330abe352bb7ba0140f3c352668e314f2edc38cca97dd4a7a962673be592743f4ffe7c", 0x2e}, {&(0x7f0000002ac0)="9453488380e1953f468719299b977995fc055ac038a1b83a8348cabdb1", 0x1d}, {&(0x7f0000002b00)="70be07ab1d13d54950ad11b0047781f7f4893f9ad430103a55276d6815ead806e99f999f9c15ee165edf083662c411fe9c92947a69de077828928ed5bbc5c47a64cbc0e5fb34f29c443eec039383d44d1ea01257dde19e62e7c2827b2562fc815b0abb45bfaf5ab51354140e48a857d70bec9b74ca0f16380e5c4225e3d02745a923a65c209357aae740a5d1953511dbd4e7194ed15bb137397a5b49d96f8e33", 0xa0}, {&(0x7f0000002bc0)="36a3aa832f8b019933d47aa5e2026443fd615e4156be81c6bb961bcb585feee80d7914d7e81e728799f5059d14d6398b6ed1c79136822717b4c03bcf29bfda47eda68aaa847c20ba9351236b9d747b9d21e1404d5cea50e517816e3e4c7e2a0e09b4bab917b7c97eeddc8c6b678a343da528d0541b3873d83e84a83663ead2d84495746a9b55cb970f2f2d829c32", 0x8e}, {&(0x7f0000002c80)="f0b3e2dc045ba19542f388cfd801d661ef38938e2a77df99b6c524d92cd89f901de1566f11bfa469f740005669b4bc6470b8f30f8c4aa0dfbf76485984db512bbb4421c84b8bc4d0ac95e2b9f8111d497c83da8c672f55d8d8dd6a838cc35268e51ec24b9050b7d104505e312889355596673765bea700e6e427cc173e341127bfa9ccd81e33e9a5041c5e0cc89244c8", 0x90}, {&(0x7f0000002d40)="0148e075e6ac442fcd96c9658e96621c89ec2946cb54f4458c3a6446d40fdce036fd422e77b8f279215b140a701ceabc7b750b3c4e11d919fcbcd48198561df07c4f7615875fafd4d5758cb70e6c42e45792ead43c2207442669cb2700f78f5f866b6750100b2e260a0a9335407f7b07dedba5c91351044b16ef7aaaa17286f229631d853d2cbc8984d433c20e02a87217d7f53590fb2e6594983383bda3f32aa61c226fa9e17838f4e0a84e909480f34837f9b3b5c9977c31f81d7aee41aa5a7fa854c12794be947e4b8d8b862784fc021ef504109e9d58cf4e4ca84d9cd8ba06", 0xe1}], 0x6, &(0x7f0000002ec0)=[{0x38, 0xff, 0xfffff2f6, "40232648e1a82721f979d0d71a5edf2d3241314e5bf469f963060fd81382ef5d8b0558b6d489d8f0"}, {0x18, 0x115, 0x1000, 'f'}, {0x30, 0x3a, 0x2, "b1588c07e74726f1a2ea4bad1b9f1a477c0e3f11c8b7bb1b60ff"}, {0x40, 0x0, 0xffff, "0733c45d993122442a02c91984c942bf1b1a5ff539f9c788c6e1ad821b104bda58e6e55181dbcb2aff83"}], 0xc0}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="367db42a9aef90338f343027d36edbb3ee4fa938cf7e0fd8677a63bc857d6ad682d3e76ed66d4bb346cd525ca3f8e17f46f78f6fba2b612d89cd5a859c5e26d3fb47f59d46b710dbb2251762217340a386762685a45189bcdbe569d8db0d606fd8d2250f35ae1d25c27cd41bdb0d55b167a5", 0x72}], 0x2, &(0x7f000000b000)=ANY=[@ANYBLOB="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"], 0x1288}}, {{&(0x7f0000005300)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000005540)=[{&(0x7f0000005380)="6572cffb29287d0f47523687d9da2872353ee845ecf4667b54bde6093f5ca98970f506c1f53b3138d49e991eb8e3d9851c08d9f3342ab6c1303e9c10b08259ea66fed48c98fa8fcf555f8d53f396ba6bd2688d4abb0b325c3855440ef219c6a98eea53ef7c92519eb139dd70982f86ad0cb264d72555d252c578c06d1532d7ea8030205bbc3c6cc9ec69fdf9dca5eb31c2ee089af1fe58f7b8dd7172a7f5c1df1573ab26e59144dddc3f29f3bb5896e9f920307eefb1cee2bd8ecad2a0dca21c3b2a27b5ff8dec2e", 0xc8}, {&(0x7f0000005480)="03fd9c18d93d70655a1650d9292bc4bde2858f54e0a4abbe9c538c25b7399311edca570607ff7c9301bd1c14b1fc419fded11b18873bb0d9d527f450fe07ff4d02fce0d5cfd2166e81a6b87dddabf394659e7b0bf112db13428ac33d2fa03bb6e7e284816df3f11553f0f9dea0044c9fcb9a71d7c78e507191fd9fcece41e62808b73c45a6afccc9430c0447f3c28e9ea1bb5abc2a51d68070c902ffc843e6557f7c99fc6446dfcd8e6992b1804c7a", 0xaf}], 0x2, &(0x7f0000005580)=[{0xe0, 0x101, 0x20, "a0ee043eaf1d5e4fa7c4bab0e63d1ecb3284f22c962aa47a066459395e52ed85351ec3d66de1a12ce379c49b1c69b53b8435bad958480cbe2ca535ea465972b11f5995af037d4083bcdfe2cc83b7b66fb13cc61f70a5b7899a2f3c381b3d72e678d6d66ec783b9245c8813a049d79b7b5e4f7d3669236f595481158491bca8d0707b99b98ee844ad46fbe36e5987edeb84c3321e021d42491ab831d9191ed4c1afc6248f433c0c36d82661e06742e4e9eeebdd79a69234925f433cd3cf7ddd00d87f71c25e0d7a188e955f5830"}, {0x1010, 0x118, 0x8, "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"}, {0x38, 0xb2eb035f3c180b3a, 0x7ff, "71987d58185797e1e95dc83ebe4d6f102f34aec627cdd5def4d9e6f0cbb74df13221d107"}, {0xc8, 0x101, 0x3, "c4d0cdcfb34e9a7fcec477c17753b8988be8a9fb9c5c65c627263bd5e874b2134d4cedf057d231ae6c847ee9041326d54152ae15e36efdfd5358ceaf86fdc8c344c69a6c75cb895b57ec12215ac155cd5860a4f3b574872e54d7dc4446983397d86ece5770cb3e2507d92bb4d19dd36656c95a3175bddb4dff5ba6d50dc90401208e6591659cc222cc05b416ff7b6ecc86c7a9a3d0a9b328fe52d3b366b99bfefc297b2ae865f0bff4b7d0876c2dc99cab2d97fc"}, {0x40, 0x10e, 0x9, "936c480c9c32a48e43f7951bbf8bb7f8af4a43e6d63944bc9387f14d1c01ff7b610fbf93389e011d75383bcaecbfad"}, {0xf8, 0x117, 0x5, "c46a82ee7c9b8d313c65882cd9d91863d924e5405030082a3ff767aa4219938d7bf40620697db97c6404f4bbdb8d6b146255931975c0b6aae570babaea5e3570069f4e08eaf18e4f88ba34337d641101df66502a0579efbe19dcdbe2bd0551a0d2f2d863315feb536501ed7c52b4743aad198f4d7f18bba93d5714bc5c242777ea65db678b7acdc3c5f3f4f26a2e3b760609f243d8961bdd01383429538bb2d3e95dcf137c33dc1e8060307f31aab29ea104b1caeec28161d18f7e66bb57b5d8fa649434ec214b5ed88e70dae9c2881b8e6ca26edd05c126b395eb35400ee9ab5bca90"}, {0x108, 0x10c, 0x2, "da16e6e18cc920574c5c2bdb314bb3cf45c4cf7d9c3bc859f141400092716a51d4aaa6081a204982f4c3f2aa4e10c7dc114cf9c2c7381eeb9fde9e7f4206e4caafc186ec8215211edac3cf1b89758d3833a5c2ac433ef1e1b47e0419f69fee69b0860346e59328efdabc459c79ec56058565a725009e072dd099a382eaaaab950ba0d16e966a9ada851884de4eabe818ae193a61d4546535f4cacef7894505132e56d6e36fe3c46b9fa0a20418a10ad6d92c39c95ed8a1c9d65edf22c7d3a19e1f150e2bd66ff06d3e88a977e1042434a532e0f378e0f61086f51939405ed6d68796dae0d490490589f4b2b5a1e8a24fa6"}, {0x110, 0x10c, 0xdb, "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"}], 0x1540}}, {{&(0x7f0000006ac0)=@in6={0xa, 0x4e21, 0x7, @remote, 0x80000000}, 0x175, &(0x7f0000008080)=[{&(0x7f0000006b40)="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", 0xfc}, {&(0x7f0000006c40)="f6c26c76a7d2cf1c0a6e1d5adc90d837e23a633e2451b4af0a6cb8ce2da8238d0fd43421acf9487d41f0632ced0479a26fe2d8329b3454fe58b9cffff39fd1a1d52ebb3f1f7ec1a2850922618e128dc5502734ab1335abf60da6a87e525833bde2084bd8ec1bb150ffc58fd7ea5be7fb7311aabe55de005e4fd25805e4880e39cc078db7ab6c32ff5aed2dc0a6898fc9ff10dd3fb6e133e1f7e5dece27c03df1b76ee9adf2cec712ef9863f944", 0xad}, {&(0x7f0000006d00)="85f92fe86ffd693ba9647534b8af161a1fe4b56beab1480fc06e8c145c0b4b2e58ecaa8df701f6526d67356386a3353eb5a729e5664345ddc4fac96e7435a3190de8f388d9d800e5b85889af4a1367f235a1aa8dd18b1f662253070864008d95c9ae57e432a57c5fc4fa2d045be0ca7a883ccc51e989af0b88b44b99c9b06e849bdb046792faf5027940eee36ca8409665422e93d845c9a8cfe3d673deffcbbdaf6cb3c63b9ae910abd2badccbd687899fe4d3a55c9e0c727cfbe1d8c1e95781fcea7b05c293871a1e51d2c0", 0xcc}, {&(0x7f0000006e00)="40dff4f83d2ab1e6138f78ab0fc40ee195ea48e0c97dd1585d50af04ddcec520280e5ac8bb54d1b23efc365203a2681b3455353300b2cd31596c43bf8a747c267abc6563dfbe5fac7d6c5ec2139947c26c1fa7546bb2a69fcbe73c85371c613477bc6ec025a899d055eef317bb01613a0aec900b47ea64a48897df40392f421c7398b1daab2fb779aec6a2a46ff2546fce9ba7e0352f1a1b700af7e30814a32143437d0a6e46994dbbfb0bbc5c83c67edea0f01a3c8d40d725117a988c4e18986bd974762c", 0xc5}, {&(0x7f0000006f00)="05ecca14cfd39128e751c9b780671ff834d5cca7bc7795adc17f1ce35a990bb7f47ec82c976da30d6ac40323f8f6114e17df35ca0e81e5766755300c27ff0a11c90a817ebfc53ae53522b7269472", 0x4e}, {&(0x7f0000006f80)="cc5e779fae95b0b6c3a58700473e74de67731193f05b8a70504306dcf1ffc7bfe5a5b5a45cd626fe3da10d201b631d311efb1aa9e55c779a8c6724b8bdbe", 0x3e}, {&(0x7f0000006fc0)="c563a79ba8808f74ac5fffd8e5a5f9b914fc2cc0ab2a34879aae7606dc7bc73acdc13e7b3e52f179d63efd15b2779321fad985211f0ea16cc79a49a898f323133bd75d1e086e8eb35012cbe77729dbdf", 0x50}, {&(0x7f0000007040)="1360d17a30ed0b02703decbb23306e43ffb8053486cad58080d31e9b1fdbe90cc2f232a553ccfd5005242d065d757a5ee33a835d88fb56890c86851b87dcd5", 0x3f}, {&(0x7f0000007080)="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", 0x1000}], 0x9}}, {{&(0x7f0000008140)=@can={0x1d, r6}, 0x80, &(0x7f0000008240)=[{&(0x7f00000081c0)="ffc5fe0ca45bab55f92ce4a0a0946c7ca6b29360c1ae86d4c325fc326d231523e332d4054168418aa418c5f110c00bc6a820f92f8bafd7a3e456650d2c0875eed2e2a7ed33dd57a89567b86eb3cf289c6b6003836aa6d40e19818d2e6c6e", 0x5e}], 0x1, &(0x7f0000008280)=[{0x1010, 0x109, 0x101, "e730638aedf46454ea0c99e52ec1026b9108607f8678390473cef2621452846222f093bf70ba0b704ff81836a69c5cde2e087384e7bfdab69fa019d4262799cee42b6015d2d54ae958e5bf3f0cf1c56273f8786fd3afa86ac1f2610d38a45f1aeb51ab97079de1958cf6344630958741fe906841ed77abad9743da798e42d160c8625a5d945dd71aebccd7082462c4e71da79cbc930659ed78f8c82384d1a920bd1dfdab8e3ed77a9d6e1a52273e6288b1d26f83acc5577250a8f5fa5db846948636d27a2dbb64e4b09bd2c8ec2db6f0e825650651992fd91e44215ace4ec2acf29a05b8dd9a0f9ec45cf31deed2b2c5802c73990c1f33f4f86585711098728b0931d3fad1f8d9c98a2d71cd956f6d52593340718eed00469826c3d5cdfd01a68cca80de0d815bb6aa651759e1367b1091b0bf67571fc226c2feb06694ef9828955f469c397f8cad7947685bddb475c90ba5fd93872e22d08273385ea909bc63ec0d762355034a6d5513f5bc3250659b12ccf4e2920efaa3bb2e9fab39f9a5922fd0afcaba09fa4161db391b7ec08ca946d0163e072d984ada633cd5409c645c5b438f72085282d203a9e0d2d4b2cc8dde526db400b7427e2be9f4fed9916220f17383c917c40e0abbe89347c8b2f46846dd554795083e0ab5a6109236a5e5665282b830e2edc295228fe17497b2f668b95099cbb6e93f6a4a1a561f028f724631fdd2252d6ce0e17acd28ab6d430696a02d1406ced639410b15d18992867f2d5d20dc616abe78b01e3b0b193bda290a1b7b9d6285fab5380d52fb7e114fea4b392d1c1f6adb8969fad11731f4c25c069474b6ca20580e5bc0cdacd576e8505cfa6f30ea88ec830cdd1b59671fab754e6c4d8dfc9c8f07be3b4776090eb7b2888ca68c649c9e7e499cd465464896d8d49aa254968995c099e17baf6042178f70d5a7e5e8135116f02f99a249c605fed855d4b26221b1bd43c564b6187633ccb8de8ae97452e14dce755f2f259461d361b15ab47041c372a54e9562218a9912bccba13beaa46c2229d68cae35f5fa8d020eef3f4b363cdb3a8deab2654641d2b386b6fb280a8e63dcd8656c7e5e64172319a1807eeb85df318a70c78663b4d78ccc72a741c133baeadddddebdb749776752c2262dfb9a9797f44096d968fd871ba421337afc94997a950170ea50c4156b77acc7283f9ecf82ce804328ca674d6538686e87c3fa219989319b4245e43aaa903ae0bfd888321b33a0f0266421510119ec2b9a7df746b22452a057408ac844384b0de3835fc441474c3bf935e0be6d33e13f8e1615433ae14ad68c14b7e19b16d23b6c173622996468f84c538369ebe5cbf808656c1e1257ba20e968dccedf84d36c7c834c8409fd150b691e39f4023160246e793c04d38187b0e0e21642598de2df42173db6fd8d1362eed15957e8469d61489eb90fdee46ebd861713ceb106f36afcdf4c0c8fc6cc644610c18409969c6b9842fa909a1a1db89038581d1e6a22ba3d4a003d7091ed6f14639cb0c9e90af3081bbd2fb926d5b52e8c5e66406c3eede9643bffe394eb217279c30b476849d2f4952080494ff72bb06bd0fdee924c6f3d5efd3c2cae5abb2ec8c41197ca6c9c4a7d513951573eba2b018d2b6d7cb64eb194332f54041fd1b2a72ad50171546b78be0dc8bf135f7e30bc91e753e1eaac5fe6247103078d204d756514db0a46bdc3589b42ffb4bdcf17f7c8d1d53873c794986d2a5a5acec32fa11b655a851138091a029521dd625c53fff60d8fa586f6ae043ad5e64e30e7f3f87187170073cbf3942e2ee596305c29f4d032acbdf8ff83f95bfcd4429a8634bae4cbad3bf068bcde2d1b82eef6f1f8a7e32235644b0cac5bb49fde307d3f42294b15e8bfa50c5fa96c2a13fd3f23640ff09fbeb928562a44f6f8bda4d93afb6f5f12ecf66866f777c818d74800697fd790e724e8e9c8bd7a75520aba177e8f65435dca613a8d317019e7190a8d187277402c635af09997e514e82d91ed18232988a8d08eaf314a452dadc55575092277bd964cae387daa168d90963f5687489709f71fbc50726f5908befa35a2d06631af0fa516ea05954c8bb676a0a5e4333948c9eac1640d458cde1f4eacfb2603b96a609ea693f4bc68df44dd6d195c9233be634170e4140dc44774b73125bdfcabd90c9dea3bdfe329b7c8924e8e7cb0ac5dbb1877b60065ef186d548e6384ef1089c35080a86deb0962361997fa5f10329ce6549588b986e860882066e15d21596ca5a2cb9fe8249c606ab7275f2ef4be66d9e65b1b70f4e353d5dc2b6160520f3e1019e0616446448457dea4ac477a415b9a7dc154810ab70a0f6d2872a7b6e78362c8ec1b77d731ad8978077aa17c0f2809156e4ef9b55514ce0e02461ba48290c8150e7c999586451142b176e783e58204ff96802d13ca96d7df8e6a07f21995f88a6b2b8ed06c95356d55f1d0992a4347da11b23583e685dd0db45bd1e5c165b546a11015a278bb32236e7dadcd2e8f6bd1f2110bb3c9309e583cec4918241a12452c1c44fa31354b7b4552733261c0b417e4a7ff387e6cb77c501da673787e33f48b3e4b98d21a72c7225292260b76e34961b8b188ed9f84147bf34d5f063f2b8cda8c37bec0be46d7514dd45692e084a61596927c53cb4600e7838823c5f11297de5b9e6a4fe0281777b2951a37daeb4c0a481e42735f0646d496a5ef5d6391fec8ce01ddbf57e840ea67b5d102fd6b226ef97a21445bc186b82bdeb06cafe6c33ec5783eab4dd272e73d428b03957dbf7d7473115e9e1c59431bf6be13cca7ede85e3da7881da192f70cf96d36766059c4f95cfee954af3ffa6e6448d956a6a2cbab4a1b98ceb36ffbcc7ffa6e6a3544f6d35a5bd026818898789f258bc5db190a70bb224159c7ddaec334e1221b39ce959e8c9e03f030801e15b8a5e27165ca02ea3c4bc434e257223450e0bc4269f4589983d777f1691ec348564c906b1489dc56741967327cf12dd785801e6a819c71ee99fb05357677fd0e4a80309f7e6ee2f579bb341b5e948f643335808009894ddfc08e82bd34b77bfca1a6a3fa2a6cf4773327a5a9789e4034a6d78b44b827878254e93d48784e2147880e3da8a037c1561d1781ae13e8e6e71f9d16459542deafb95b92802afdd4479051ca13ae5d20e1bbb795b57cc0068a95371aae4a68426a69f5b2988ac9059ec3e1f0983e4d743cd18eac73cdb7b99cea7370e36c15f0c5609f3066ddb6b61671018b377f44c09068e1a0e16832ff80fb85a790c4729a388386b819395547b6b64d761aa6a5fa246ff834385d8671eeaee2e8294b767d376d23d1a24296b3f31a124672880b056e3bfc93a915d79c711685dcfc3d079be8093e4a058ab9dd77f0a99b30afadb9b6e9cb3050b0bbc97041ab40e5b76315e12ef727eb98aeb136d7acb4b47494c8987792a9f58556090e22ad1c87448c25a5ff21c629bdf4928d93ad17b6d192b3be4015a8831fc99cf59e1beec14eb6cd54d371e2c8affa6c6e0ae48e29dc749e7d1a093bbb98a1af6a62c82cb660b8a53f242e179cfb5156ab79f29babac13364348284c9ad87430ba6fc6de5cbaac46ef5d15e96ef986e2984d572357a6abda68030ced02d9c5f4f8a2749608f6fcb934a1c680bd3bab4df53f0f514f7eadd0d8e00ca359ab30624123edc4d6746b9e5722584de47857f4d63788398fcc1722c75305f284113d6332ee887c7cb67fde5fca0b231432ae503c96a14ab7164877570a4b9811e3397d125812c5d4ff454c4554ecbb61d1ced18116231da5b0b94d522df32c0a42bae3021794ee1da8cd2e4c6fee841213489f605ab219301120e39abf6653431bebcc180eb217985342814db9464a1ffb1cd8e675cebb6d3030ac460f078c405c3f5fa0a48b6598b22a535e0c9dc67072149d511005c35722542fd866c9d8903b3c85fd83043753d234968b2d8671c4e9f9bcb9c8ad6e7f937c036406dfc4fc56e06d0236639cb999855b94c4968d17ffad0c844a6c88456517de74ec377cfc7d4135e22d59bd9cb7c01839cd92a42e23b0cf252214850323e9a76fe5cfcc1a9b31f4df4aa86ba6a4bcdc8266836ccf3ac754d43379bffbc0770f47416aed8b46312f4bc13e320f29b081fbddc364d1672bef3460ce2d6b7af969bb3e892519e743bd8064fe4d691c2df1bb75fe956ea0f6aefd145d067728ad3b6948029899eab0b9b6e536ae5638ac08edd80a6cddfcf962bcc2a9e2c7460cf86b19ea96fbdbc58d1992b6b472d04612da3d37f224ee0e75364c583fda2c7bc2cbf1b5924bc77c22c0fe2d8d07e347fa2ffa2df39685ceca19aa9abb08e686f2d6a1d50a908e85ef5ad4b76fbc3560d0d6d5e9a874f7c34e78e7c58d792d3702759dff5125b9af186f4d7622e8fd0a5602a303d3784ed4edaed5c8046aafee0361621a2d7ca2536b3eec017040b06ad80585ce3dc6a07eca41366dff11517f24e08f538545942ec0f749ca82b6f779abb00ec127283794266e5b138db0bcfa886107811c1002ca6c132124a5a1d718508c148b6d9d71dc19f5089d8d19803ff444c16882a7ac04289c8690d9bcf7060d05756b17ca483aec4f5730eec49faf031338711b50167a0cbacf887ee20d93514d57d44c68caac47a33daf5c642b1d983fce6a4135dfd2118ccb3b76e8a75ac732b976c7a69466dd7d73185e9e27c6e2b9964d710f8151e6d8cbc2330e4b68d3ac1decf505ad666c64298f249fede1a7e0de622904b35664f3034d5d3fa380960e12646fc43a5700287410cd453c2de3bdcc7b940fb4d3d270b30d1cd79e457a30e7d3de16755e0c33ec5a8104bcb3cfdfe549cb94a60e8000a5d3269996ad14e8761c6b84f3a1b30a64d10fe7ced5ed97e88abea5696d7753c718af4570d53355f4acaf3fc1d1f08f27a728c98a7e87355be0a609ce65bc639d734432d65cc25bc72d38bd6f01d95c16468c9934064e4f7062f75efc7785ae8d893f187520abe1d69c42837b06ae6c89fcf4f8db764e8fd67dee33ab882daba28b1879911dd90e3d64d9e22b8dcf26ead1b39e96e3c410355210b1564d1cc2b4216f964a30b4bac3022b6d08e30ea982ae8a7a1a43d3ec97b4e8d0cb3b7ffe1bdd02f4e5ffbce517d0871813298db14c43278aba664b88c3a5b037405c17ff560217b18d375dddebbf1219dd7eed7d0a6e15035d911c1c06f1646c9c64b9e1eb5b17b6658c8aa4c88dbec357f58668c5324d54d19922b1e8c84224330b11008086ba0df225d8919bbb030c7a561b4c1ccc835e347336956f212852932c10dc9198e7d83363840c0498a7468799a6f3d09d8595b2fa3d51af4d72cdec2ff8222698fc8413dfb75c10988a2ef223e5e0c11b3afc12fd82b363f3ac444ee819cf912e9ecb112c02621b431a5f10c47d35492fa599b886619a76c00b85e7532955b7c38eaaa5a4e9397c4c1d58eb439c74f3a2e60e464e43ec2cdf5342e7149ede310190970d6c902bc1e31cb27d12dfbdae77422e127e3e8b4f590566ea25b658ecc22bcfe4829905ff8b4b449d1dd98a17b4a03f786ff1f32b5ccf936bc457b8403e7d606b313d3909fbf712d308c9e3710ffa04980c6c6806f2917219bbe88ab52272f1d468a83515588d7c7b343485104eccf63bd5e3a40d30cbb7e04cc7cf5939a421a3afa41d684e389eb0a060fc36129ca38c03426956d02c4d5508994bc6f7361c43c6e3b36d1ad1666f9f395cf4367fcb5a00779fe6cf3ef49b6977adf97060aad246"}, {0x108, 0x0, 0x428, "284998625e43c14ce8c4cc281ba98d627bf67ae129c7af7e7a86c0b0409b435dc2b1f3f35a9c73aa19d071f12afe33bb5b2ff12f19896e63ce49968127da25fa6c0e5bfc66a8af17c73babbd8148c7f0d34beb8c7cef283b31f3ba4ba02aa061c2b2a992ce580f3da291bae08dac864aeb702c2ab5f657cad7777a6dda66cab898a43f1ed5edf1ccc24d5207e5c17304e00355f184398e0ba59ba76d34cddcac2c5820f06bdbc68fcdd892338a8728ff592e98b2ce641f49a836cdcad23e6f3c02b2c0cbaa0fccbbd40369814b574dc9013017a70bf614938442dc705f7d144b08b56678cb7cb03e057280a0bae3ae4371f03292135bea"}, {0xa8, 0x1, 0x2, "1e08dbc3988865c69a261a09da5e922b8bcda567f6ea08d3826bbff8b82e23147633cc90763a7c6aaa7ee3d6d898c770a2685004f227a29d3cb552b346382fce58b2a4920d36b3b1b66365125578f00b9811be17aac20e278cb9e007b1ed60a959ac86033dfbae23851d0f0363b94a06669ce30e1b756728e52e2fd43093959139b31856954999b2ec15589fdcf661c505356bdfb8"}, {0x70, 0x10f, 0x400, "42e140dd3ff4f6ca510059f7f9ac91aef125eff7260a2debb21d4b3f286777c91f8bde2a33b3b56c8e860a10bcd0a833f0f9d4a506de8eddcd4df25b5252620e9d80aefd8887ad402b662682ef0620705d9c8e24092cb939a605b109afa5"}, {0x30, 0x101, 0x3ff0000, "9e7344c2264411d1271566fa22501c77021f2ece36fb3822375edc1bb686"}, {0x1010, 0xff, 0x3, "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"}, {0x28, 0x10e, 0x3f, "f0b0baf088e2eac82e87eb2daaa00259e1ac9d48c7e8dd"}, {0x90, 0x107, 0x2, "ef7ece2f068fc651e5aee3ce84f990094b142ef76e6bda72d6743533563125214308432c8a2249eb519f039f742f8dafbd2fd98ba8bf740723bb4bf7fe934dae278d56e227ccdaa4417ab4fa71717c5bdfe690c0686a881eb18951d23807547e33653e2d7ffe8eb8f6b830706673109424cd3688eb8f363934f71e"}, {0x88, 0x31f, 0x20, "4e54672be4cb09b8be8b01dc639dbed58f7555b876bb6696aff2846a142e8062e373560b0836376d6c542b79c0f6bfa3cb6a29661d3e5bc0a2e11a8d26259271fe8998dcd66e916856d6f91daaf17dcb36d896fb2829501ac3ff555920bd2bc81c0040411bf89d53ffdd9a26e7e34330ee76"}, {0x70, 0x10d, 0xbf, "91052d661c4c5c0456908e3af1f7953f9e33855ad5cb762692868e38ad5168651c39ae97edd5439f4a3bcb3b15a3f15696ba9a6ca8950994e171cd061f201a52759d87d003ba38da7930c0adfbfe096a1dec61ad09a75b9d679e6909cf"}], 0x2420}}, {{&(0x7f000000a6c0)=@hci={0x1f, r15, 0x2}, 0x80, &(0x7f000000ad40)=[{&(0x7f000000a740)="94d9dbebe43cbbcf9d0cc79645a81c1b3d6e9824805ac58ebafe7713e4a87045b34559a55b24b8e81335819b37208151f67f162f7fa8ac5ff5ab61714d39efbad354550f5c4e9e3c03c95dcff8f7fd84386ff3e1f791e90597b0c04e05e4731c8f3349953c1a01880889cd7f2f78c8ecc929513ca317a436678e198addab3122c7328e98f71591ff382bf502752207", 0x8f}, {&(0x7f000000a800)="458199618e45f90301f477e63996f903959290a1d655b6babbd23a118e6100e4a630cedefd1714a9eb26b288cc9643900d029216d2d5f077484965f060cfd258da", 0x41}, {&(0x7f000000a880)="9dccd300c061b8b4aef0b05774cd4fcee924e142ab1adb22e78d7b2d329e73e86450e95b7544b27587bcfeff4c49a7f45d102b1cb603c5fa7c33a40c932854c5524119c4d3e2fbdf26856c607869530571bad5c26a", 0x55}, {&(0x7f000000a900)="9dd84471d393ede11e0b35c1aeb94bc9d63e0f9825a1a33001f209ddb016ec217c72f5337f2ed1898c25f51127961776b41bb8474f00ebc2e6ba4ac6fc51bf2279375a713f3cf760ac69991a8e4e16127d9eb1a0827457e16e78b00e78b05fb7bb38bc72db5e21bb4aff1aa9ec8ba59f0c", 0x71}, {&(0x7f000000a980)="f4e018be8761b2890399185936b99b25be358c79dc481ec9b4fbbfc97851fae574ec3188dc20d5664b14cbfe9009ff3fe7913bcb07b5dc3fd049df67d707cbba164759a336597f1987c3e46a4a4e6c715c4758900e02a71aee95feaf0a0c08bbb54d48681b55ad7aa4c3f283f8be2b5b9a8ec60d0a39ffcb135bc5c40bf20171d124631d8dcbe632690ae5e2fface097e4fa9f3969410517d385974c1539a86a792788214974976c01ade73e82db7d588df271db46653f8329087218b1114cd11f636b8d592a32bca86d", 0xca}, {&(0x7f000000aa80)="f189516bd05bb151a0b8c2dae1f92f672c7cb3179b60b048c09f1bb6c56e9763741ec7cf011d03406323127fc6e94f718e8d128238adc0f84ec87879e483a22445214dabec7201c31f1173d8097e8b76c6ede5bbfb508e01e4d2ec49e37487b6417b4c211704d6bf44afeff028bffd20573c8ed7dea6cdcb3fe0d141466ce79c0f48103bafa8e7e9305c810effaa1e014451", 0x92}, {&(0x7f000000ab40)="e92fe6c5bd62ec28a78c110bf1aeec842b468030ff98a1574bbe1a3c4f385d2da499e2fab14714784c2594dd4adc17097a01ea60cba79321be94d3af03556534c8885e4b83b131afa77eda9167db08ec10ec7132d00cb1b3226ffb81dbcaa135e7ceec7182f686ee02ee4c551ddff97329bdcf73ee059ea34c65b9fe5201babed5cd6c2663230c67539708ac9d5047047c7ebb7d824ed4028e44d6720d446972321ef64a40d4296ce765c266c20c4154c239e6ed60ef0e915b37bedc8c714e97af59bb0ee50dc4972bf7c2d1382c21b25bfdf89aff603a5ff5f22667e1fdc178f9724f6f53279f50e07a36dd", 0xec}, {&(0x7f000000ac40)="f99af1cce5e9cc5de6e67999f5d93df1536d30489bba601a2659e1d79c690f389065c577048f715eabf21fde0cf0659a1e0d086655964aac6d55dcc81a7b36ca99f9ab4ebe398290f4df232c5f98612370adb05a697a536a788b09e23f215f9cbec4d78b05657246305fb28be24c1c2851552c421fad75cfa4371b2e26dc75586742f108eb3d95514cb30de14dc7ef045c91b689b6a5570f84864b119a9536fb59f83f0e713e37a8a3b469d1b0161777cf25c5f353ea83fbbc40102053ca9b36da4e798436cd6adc9b8598760e38e16face21b6318aa085d4dc5ed29482ef742a94800fa74d0bfefbec793243f", 0xed}], 0x8}}], 0x9, 0x14) 16:50:57 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x3f, 0x0, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/\x00\x00\x10\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') socketpair(0xa, 0x80000, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0xe}, 0x2, 0x9, [@broadcast, @multicast1, @rand_addr=0x8, @empty, @rand_addr=0x9, @loopback, @rand_addr=0x5, @multicast1, @empty]}, 0x34) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40000, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x980, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x40084149, &(0x7f00000001c0)=0xa000d) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$RTC_WIE_OFF(r9, 0x7010) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x1f, 0x9, 0x80000001, 0x1, 0x7}) userfaultfd(0x100800) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r10, r1) 16:50:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:50:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0xb) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc1105511, &(0x7f00000000c0)=0xb) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000280)=0x7f) r3 = socket(0xa, 0x80002, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r3, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x4, 0x82ac9cae, 0x1, @discrete={0x3}}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x20000) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r7, 0x0) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) close(r8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000120}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="10002dbd7000fe200000000000003b6e7257267df94061573d996d0f5fb8165c0ab6b2a0aa01d74a63669e79cee0a3417b60cde91234a2b090452a1dc0df94b33efd318dc397189430c9cc32531878c880dc1a9a5b5ea158416c425fedb7dce93974214ea87c"], 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x2400c050) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) [ 975.083644] input: syz1 as /devices/virtual/input/input183 [ 975.116876] device syz_tun left promiscuous mode 16:50:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 975.165980] bridge1: port 1(syz_tun) entered disabled state [ 975.184516] audit: type=1804 audit(1575737457.379:200): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1612/file0/file0" dev="loop3" ino=297 res=1 16:50:57 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 975.233702] bridge2: port 1(syz_tun) entered blocking state [ 975.239823] bridge2: port 1(syz_tun) entered disabled state [ 975.299400] audit: type=1400 audit(1575737457.489:201): avc: denied { sys_admin } for pid=23936 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 975.301239] device syz_tun entered promiscuous mode [ 975.357928] device bridge_slave_0 left promiscuous mode [ 975.367096] bridge1: port 2(bridge_slave_0) entered disabled state [ 975.462075] bridge2: port 2(bridge_slave_0) entered blocking state [ 975.468679] bridge2: port 2(bridge_slave_0) entered disabled state [ 975.492506] device bridge_slave_0 entered promiscuous mode [ 975.517644] device syz_tun left promiscuous mode [ 975.523224] bridge2: port 1(syz_tun) entered disabled state 16:50:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x1b7) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:50:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000400)) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) io_setup(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x6}) socket$l2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='/'], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) 16:50:57 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x0, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:57 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x287}}], 0x4000000000000b2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 16:50:57 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000200)={0xffffffff, 0x8}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)="66c4eb2f907bc8fddb7c327570d311cc5896e1b6eb885314978c4e3342254c85edaa9d4868529aeebd70be7c9139a15497d55c42b84fcc1b6251577d5f3aa3fd0025ecb933520e9d7147eb2b2adef97f5d7b16555d3978ce1959fb15effb6bc4e2568a922270e650228efa388b1f0387", 0xfffffecf, 0xfffffffffffffffa}], 0x1808004, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:50:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xfffe}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r3, &(0x7f00000001c0)="a6bc747b5ad3ad64518dc193ae9c824651a0575925d6f33e59d2257487f79687d9b6224a0d7dedaaf97e9ee8a184410ad7e8024472a3355bef127567558b9a174dd87fc530ba816a854a1b296a518653d97620ac8fb40a13273a89be92edc30da2b8dcf987a4e0045b38d4ff71ad8dc78198ff3980b9668fb81a7f7212185cda0870d2b572402fab579513b796f5eda31752ccdfe81108ebcefc7eedd99d2cd0c42412ecf09adcd077867eb4ef7b8ca739007c0783ec1de13b560e4894e1bcb95eb197f33b9d5b9726dafc7942f4e9ef65841204c1b3f48296f524678813b267515d", 0xe2) r4 = dup2(r2, r1) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x1000, 0xd90, &(0x7f00000003c0)) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) write$P9_RSTATu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="790000007d010000005a0097e501000000280100000008000000000000000000800001000000030000000200000000000000070073656c696e75780a002f6465762f70746d78000a002f6465762f70746d78000c002f8100000f75696e707574000a002f6465762f70746d7800", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r8], 0x79) [ 975.714017] input: syz1 as /devices/virtual/input/input185 16:50:57 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) socket(0x0, 0x80002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r6 = socket(0x10, 0x80002, 0x0) sendfile(r6, r5, 0x0, 0xf0d) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:50:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) io_setup(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='/'], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) 16:50:58 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x0, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x40}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) 16:50:58 executing program 1: 16:50:58 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x400, 0x0, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 976.099242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=24027 comm=syz-executor.0 [ 976.173579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14392 sclass=netlink_route_socket pig=24027 comm=syz-executor.0 [ 976.665532] audit: type=1804 audit(1575737458.859:202): pid=24064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1613/file0" dev="sda1" ino=17218 res=1 16:50:59 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x4}, 0x0, 0x1, 0x4}}, 0x2e) 16:50:59 executing program 1: 16:50:59 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x0, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x41}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r3) ioctl$KDDELIO(r4, 0x4b35, 0xff) dup2(r2, r1) 16:50:59 executing program 0: 16:50:59 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6, 0x20, 0x8, 0x2, 0x0, 0x100, 0x946b323184dc73f, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040)}, 0x10400, 0x7, 0x33fa00, 0x6, 0x5f740, 0x7fffffff, 0x81}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x110, r0, 0x5) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0x76656f) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$VIDIOC_RESERVED(r6, 0x5601, 0x0) io_submit(r4, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)='\\vmnet1\x00', 0xffffffffffffffff}, 0x30) write$binfmt_elf64(r7, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4606011c01030000000000000000000300080000001b030000000000004000000000000000fe02000000000000bd0d0000000038000100ff7fff0f0500050000001c4c00000e9f0000000000000004000000000000060000000000000007000000000000000400000000000000a100000000000000000000008161000001800000000000002000000000000000080000000000000020350000000000000200000000000000000001000000000048bc5a94b9cafcab341a7fbde13bf3afa02380a441fb0717e420d1a00c995bc32ca94840b1145d659aa4849162e8484481d45f3c2e1fa0e4d2c6aeed7f9bfb7b15e9deef380da9efd94b449facfc348ccba3723f0c47197463524763e122256728090495e1d5dd013fa6d783dfff0bcfda53a741f63b207af2edc82ee806693f08e2d66f183134a8d7e1c58bd95ceaf089a4bfa137f1d1af67df02fd422640f20aaf0a908139f823aa9468e5336ee48b124c1b4c83dd3d21c1dd15da279045cfb23fa6b1b05cb898d3f605e2883c36331749ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/1155], 0x483) 16:50:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x1, @u64}]}, 0x20}}, 0x0) 16:50:59 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x8, 0x0, 0x103, 0x2, 0x0, 0xfffe}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) [ 976.931214] input: syz1 as /devices/virtual/input/input187 16:50:59 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) r1 = eventfd2(0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x2008000fffffffe) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f68fde88b508405"], 0x8) 16:50:59 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x0, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:59 executing program 1: [ 977.069143] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 977.158006] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 977.171665] input: syz1 as /devices/virtual/input/input188 16:50:59 executing program 1: [ 977.207961] audit: type=1804 audit(1575737459.399:203): pid=24109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir384714690/syzkaller.l4OTIz/14/file0" dev="sda1" ino=17283 res=1 [ 977.260408] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 977.290121] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 977.367136] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 16:50:59 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x5, 0x0, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:50:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/de\xf8swdn\x04ut\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r6 = gettid() r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x4000000000000, 0x12) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) write$FUSE_LK(r5, &(0x7f00000001c0)={0x28, 0xbdf20c721d9349ee, 0x3, {{0x5, 0x9, 0x1, r6}}}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup(r8) dup2(r3, r9) 16:50:59 executing program 1: 16:50:59 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fff, 0x4000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x7ff) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaacfc, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x86) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x1, 'veth1_to_bridge\x00', {}, 0x1003}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 16:50:59 executing program 1: [ 977.548741] audit: type=1804 audit(1575737459.739:204): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1614/file0/file0" dev="loop3" ino=299 res=1 [ 977.680135] net_ratelimit: 19 callbacks suppressed [ 977.680140] protocol 88fb is buggy, dev hsr_slave_0 [ 977.690284] protocol 88fb is buggy, dev hsr_slave_1 [ 977.703653] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:50:59 executing program 1: 16:50:59 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x0, 0x400, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 977.722414] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 977.732755] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 977.742368] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 977.767318] EXT4-fs error (device loop2): ext4_iget:4712: inode #2: comm syz-executor.2: root inode unallocated 16:51:00 executing program 1: [ 977.798867] EXT4-fs (loop2): get root inode failed [ 977.805675] EXT4-fs (loop2): mount failed [ 977.953689] audit: type=1804 audit(1575737460.149:205): pid=24117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir384714690/syzkaller.l4OTIz/14/file0" dev="sda1" ino=17283 res=1 16:51:00 executing program 0: 16:51:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200000, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x84000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x70, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={r11, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) dup2(r5, r4) 16:51:00 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x0, 0x400, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:51:00 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x7, &(0x7f0000000940)=[{&(0x7f0000000500)="fea17fb99ffd81860de9040a8885ecc8ddc8aa81903b0016372db7f80f4c0e1eaeba1c7c56376ba90f4041a47d837d5805115d646b6ecb8dc1510e195da255aad629bdbe29f4dfd44e85a0a092ba18d6de32a7920577baed663110ba2ce0a886c6be1130cd465388a5518442842f38d44bf2f8b6a4865137b2b653bc9bb9eadf04bd266a62dd2db77e11b3ff57607356bd42423962eee28e48b49edbf03e3f00bd9c42a8995b6926918950e7badea630edd47f3cf12a5ed13bf93e689045a06e958036eaf1e382c4db5bf607f917880fba8049a704badf22a21245a5d3353f8720d55db210ba1e4e1ebf4f8cbd65cb35eafea7", 0xf3, 0x8}, {&(0x7f0000000600)="1cc05edc4689ff457f01c48a00a84d1f39f3388f7ccf1a147e9e188bfb4001373fec5beaff3a27d470df1200f5dfbc326e035e14184aa3c79b5d38014a8d255fdc7d2845dac7569eaf3ef8152584a579c9787bcdc27d4417d49894c6de7cb850fa3d1de660f3e64f00fda4800031f841e39e7f0d710a64395654fb8f0de0a90b1ee832393ded137669b46a5c68a2a83f63800578cd3a9d626ca0249d71f92dd8a34998bcc9c2371b9a67b0f7edd905ee2ee9f5e95ed065d99ac094d7c25cd2d465f152126016b3a909d2fa", 0xcb, 0x4}, {&(0x7f0000000040), 0x0, 0x8001}, {&(0x7f0000000700)="87b955ffcbd57df4097aae5bcc9d3688606c8804814c621fd1156748b49eb9b833e8d7b40e981ddd89ae6fcdecb834306753455c7dd6e20c168a09a63e3f19f1aa9250ef9c2bc9c92e8fa2d17cc62996f460e204283906e851dd6f676457e05c62bb9988cd55714f13c365b7da03bc7f4c5f6c355b3564b0ca746c9f89d51bd7aab96a92e55672f914c1c11fc3d07396164ceb65bd5b82c30aae3ebb90d19139a597385eaf39f2eb8e2c1fc480b5ad8c67391c20ebb09b6baf9243ff70dad42235e929f4b759c0225b22", 0xff07, 0x20000000000000}, {&(0x7f0000000280)="71c07e", 0x3, 0x3}, {&(0x7f0000000800)="f5dead9fdf6be4540b15a85ac99d70248e770a6806e76068ae5616e9208ae6ab09ab5fae584bab7dacf8942e8699f0bf4cf8f7c259f83e3766b3ca2cde675f38f19d06ff246befb53ca35d3ca15ed2d3048b5d3714215a796104f653fb84b99c434d28aa5f8e398e3e9be66627ad841f89dd2831fd736e6eace5a325e0513e4a221b24cbe3751603f54ace0d3c28d9fe44c517679a7bb1da59d85a13d71a48ad635f52f1842b8c8a", 0xa8, 0x5}, {&(0x7f00000008c0)="73b21f8b99a6d7520689ccd88f0276e3dcd69e62e9ff91564e22a5a9b76dc245d5122b6fe4912e84536acdb3970704d8cfe760ddedaed6f45e7bfc68d8e14577e8e2aeafd3ea48ba8ea3bd30d48ee5d967bb39", 0x22, 0x81}], 0x1101003, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:51:00 executing program 1: 16:51:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) mkdir(&(0x7f0000000040)='./bus\x00', 0x2) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={r8}, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r9, 0x8b4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 977.980556] audit: type=1804 audit(1575737460.169:206): pid=24162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir384714690/syzkaller.l4OTIz/14/file0" dev="sda1" ino=17283 res=1 [ 978.000159] protocol 88fb is buggy, dev hsr_slave_0 [ 978.012922] protocol 88fb is buggy, dev hsr_slave_1 [ 978.018058] protocol 88fb is buggy, dev hsr_slave_0 [ 978.023145] protocol 88fb is buggy, dev hsr_slave_1 16:51:00 executing program 0: 16:51:00 executing program 1: [ 978.076124] input: syz1 as /devices/virtual/input/input189 16:51:00 executing program 0: 16:51:00 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0xeb6f, 0x0, 0x0, 0x400, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:51:00 executing program 1: [ 978.244757] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:51:00 executing program 0: 16:51:00 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)="dfde40959d6994b1862d2a0e47ac4de991a48dc39079394798d49195f0d318c7657ee3d5ab5e62c5f9edb4dffd4dd183d665c69741da41f7fb9a9af6601937018bbb2075f8273028df051ec2efbd9afc21ca8d47b630a90d6b79f3220bf4deac7b6cdffd72b64eddc86556a61ac174e420d7884feea1f11f6db53e73c186eb89dd6274dd0a84499e6efa5f6d181e8a3daeead072ef3fd1a6f7303ec26ff011f2642491d7b2893a42787ef7054e3d1e83d214e739e9d876f7c3c80063ecb35f2ee4c9e46f0d0872948c8b1b8d0763ecb01fc7ebb85fcd44fb8cf527478945a8753b", 0xe1, r0}, 0x68) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) [ 978.296501] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:51:00 executing program 1: [ 978.357820] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:51:00 executing program 0: [ 978.409156] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 978.487491] EXT4-fs error (device loop2): ext4_iget:4712: inode #2: comm syz-executor.2: root inode unallocated [ 978.517301] EXT4-fs (loop2): get root inode failed [ 978.532643] EXT4-fs (loop2): mount failed 16:51:00 executing program 1: 16:51:00 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f0000000200)="454d1f231e2a84de66d1689477e13b56ade959f3b8b6c86d398163972e5b009a16c051ad2c50fe1b8542adeddf518f22b3e27ecf9b825265e9f2f5389c858916991c938359d770e8080d3428a9ccfffab1f2387c44382742a2b595a1bd9118b4589dc7f9de5f745b765cac9208", 0x6d}) accept$alg(r1, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x9}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 978.572516] audit: type=1804 audit(1575737460.769:207): pid=24191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1615/file0/file0" dev="sda1" ino=17272 res=1 16:51:00 executing program 0: 16:51:00 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 16:51:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r2, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x01\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000000c0)={0x8b4, 0x1, 'client0\x00', 0x1, "14ca33e84f64385b", "183ffddfd395adb7acfbd6db8f3410e987eabc6c817b74bc6d24983447df0323", 0x4, 0x5}) 16:51:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xe1) fchdir(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x1) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x27c290e3a17555d2, 0x0, r1, &(0x7f0000000000), 0x3a8}]) 16:51:00 executing program 1: [ 978.726110] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 978.735072] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) 16:51:00 executing program 1: 16:51:01 executing program 0: [ 978.795125] input: syz1 as /devices/virtual/input/input190 16:51:01 executing program 1: 16:51:01 executing program 0: [ 978.880182] protocol 88fb is buggy, dev hsr_slave_0 [ 978.885368] protocol 88fb is buggy, dev hsr_slave_1 [ 978.892209] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 978.901275] input: syz1 as /devices/virtual/input/input191 16:51:01 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x80}, 0x4c, [0x3ff, 0x200, 0x5, 0x401, 0x3, 0x3be4685a, 0x7, 0x3, 0x2b, 0x0, 0x3, 0x748, 0x9, 0x101, 0x1, 0x4, 0x5, 0x8, 0x8, 0x2, 0x8, 0x64, 0x401, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x4, 0x0, 0x6, 0xcbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc46, 0xf0c, 0x0, 0x3d27002a, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x0, 0xff], [0x3607, 0x5, 0x3, 0x0, 0x7fff, 0x99fe, 0x40, 0x5, 0x3f, 0x3, 0x5, 0x7, 0x9, 0x18b, 0xffffffff, 0x7, 0x10001, 0x1f, 0x6, 0x6, 0x7, 0xfffffff8, 0x4, 0x6, 0x6, 0x523, 0x1, 0x1000, 0x1, 0x100, 0x20, 0x2, 0xd60, 0x8, 0x1, 0x8001, 0x101, 0x7fff, 0xffff, 0x3, 0x9, 0x10000, 0x7, 0x800, 0x4, 0x100, 0x800, 0x4, 0x7fffffff, 0x7, 0x4, 0x2, 0xfffffffb, 0x8001, 0x101, 0x5, 0x6, 0xfffff23c, 0x2, 0x3f, 0x3, 0x4, 0x777685d4, 0x100], [0x99c, 0x3ff, 0xccad, 0x79c, 0x8, 0x80000001, 0xfff, 0x299, 0x0, 0x28c, 0x6e73, 0x0, 0x29ff, 0x3f, 0x3, 0x80000001, 0xffff, 0x7, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x480, 0x6e, 0x2, 0x4, 0xfffffffa, 0x9, 0x2a21, 0x2, 0x0, 0xac2, 0x2, 0x80, 0x9, 0x3, 0x8e59, 0xa2000000, 0x98, 0x400, 0x80, 0x7, 0x2, 0x4, 0x3ff, 0xa118e22, 0x18000, 0x5b12, 0x6, 0x9, 0x0, 0xffff, 0x2, 0x7ae00, 0x6, 0x6, 0x6568, 0x1000, 0x1e, 0xa40, 0xc5e, 0x5, 0x2, 0xd1b3], [0x9, 0x1, 0x2, 0x1, 0x100, 0x4aa2, 0x0, 0x582, 0x1000, 0x10001, 0x2, 0x4, 0x8, 0xa4, 0xffffffff, 0x5, 0x80000001, 0x401, 0xf9, 0x1ff, 0xfb5, 0x5, 0x5, 0x1, 0x1, 0x2, 0x5, 0x9, 0x3ff, 0x5, 0x1, 0x0, 0x9, 0x3000000, 0x8, 0xe7a6, 0x3f, 0x9, 0x47, 0x1, 0x494, 0x7fffffff, 0x2376, 0x100, 0x3, 0x40, 0x40000, 0xffffffff, 0x310, 0x2f1, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x8001, 0x4, 0x2, 0x1, 0x4, 0x0, 0x10001, 0x10000, 0xfffffffe]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) [ 978.992587] EXT4-fs (loop2): failed to parse options in superblock:  16:51:01 executing program 1: [ 979.026365] audit: type=1804 audit(1575737461.219:208): pid=24260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir305118667/syzkaller.CTw9KO/1616/file0/file0" dev="sda1" ino=17295 res=1 [ 979.073194] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 979.117071] EXT4-fs (loop2): bad geometry: block count 580964351930795064 exceeds size of device (66048 blocks) [ 979.127529] protocol 88fb is buggy, dev hsr_slave_0 [ 979.127578] protocol 88fb is buggy, dev hsr_slave_1 [ 979.147649] ================================================================== [ 979.155472] BUG: KASAN: use-after-free in kobject_put.cold+0x2e7/0x2f9 [ 979.164006] Read of size 1 at addr ffff8880549fabe4 by task syz-executor.4/24239 [ 979.171537] [ 979.173171] CPU: 0 PID: 24239 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 979.181053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.190412] Call Trace: [ 979.193031] dump_stack+0x142/0x197 [ 979.196669] ? kobject_put.cold+0x2e7/0x2f9 [ 979.200999] print_address_description.cold+0x7c/0x1dc [ 979.206296] ? kobject_put.cold+0x2e7/0x2f9 [ 979.212887] kasan_report.cold+0xa9/0x2af [ 979.217080] __asan_report_load1_noabort+0x14/0x20 [ 979.222018] kobject_put.cold+0x2e7/0x2f9 [ 979.226169] cdev_put.part.0+0x39/0x50 [ 979.230045] cdev_put+0x20/0x30 [ 979.233303] __fput+0x648/0x7a0 [ 979.236566] ____fput+0x16/0x20 [ 979.239827] task_work_run+0x114/0x190 [ 979.243713] exit_to_usermode_loop+0x1da/0x220 [ 979.248282] do_syscall_64+0x4bc/0x640 [ 979.252154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.256992] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.262161] RIP: 0033:0x414291 [ 979.265344] RSP: 002b:00007ffeb4307500 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 979.273034] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000414291 [ 979.280287] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 979.287538] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 979.294790] R10: 00007ffeb43075e0 R11: 0000000000000293 R12: 000000000075bfc8 [ 979.302040] R13: 00000000000ef01f R14: 0000000000761400 R15: 000000000075bfd4 [ 979.309484] [ 979.311096] Allocated by task 24243: [ 979.314794] save_stack_trace+0x16/0x20 [ 979.318745] save_stack+0x45/0xd0 [ 979.322178] kasan_kmalloc+0xce/0xf0 [ 979.325871] kmem_cache_alloc_trace+0x152/0x790 [ 979.330518] evdev_connect+0x76/0x4a0 [ 979.334311] input_attach_handler+0x154/0x1a0 [ 979.338784] input_register_device.cold+0xbf/0x202 [ 979.343692] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 979.348861] uinput_ioctl+0x4a/0x60 [ 979.352468] do_vfs_ioctl+0x7ae/0x1060 [ 979.356419] SyS_ioctl+0x8f/0xc0 [ 979.359778] do_syscall_64+0x1e8/0x640 [ 979.363645] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.368812] [ 979.370418] Freed by task 24271: [ 979.373763] save_stack_trace+0x16/0x20 [ 979.377715] save_stack+0x45/0xd0 [ 979.381146] kasan_slab_free+0x75/0xc0 [ 979.385011] kfree+0xcc/0x270 [ 979.388097] evdev_free+0x5e/0x70 [ 979.391530] device_release+0x7b/0x1a0 [ 979.395403] kobject_put.cold+0x269/0x2f9 [ 979.399530] cdev_default_release+0x41/0x50 [ 979.403830] kobject_put.cold+0x269/0x2f9 [ 979.407954] cdev_put.part.0+0x39/0x50 [ 979.411819] chrdev_open+0x266/0x590 [ 979.415521] do_dentry_open+0x73b/0xeb0 [ 979.419483] vfs_open+0x105/0x220 [ 979.422912] path_openat+0x8bd/0x3f70 [ 979.426689] do_filp_open+0x18e/0x250 [ 979.430478] do_sys_open+0x2c5/0x430 [ 979.434169] SyS_open+0x2d/0x40 [ 979.437427] do_syscall_64+0x1e8/0x640 [ 979.441291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.446457] [ 979.448063] The buggy address belongs to the object at ffff8880549fa600 [ 979.448063] which belongs to the cache kmalloc-2048 of size 2048 [ 979.460884] The buggy address is located 1508 bytes inside of [ 979.460884] 2048-byte region [ffff8880549fa600, ffff8880549fae00) [ 979.472919] The buggy address belongs to the page: [ 979.477839] page:ffffea0001527e80 count:1 mapcount:0 mapping:ffff8880549fa600 index:0x0 compound_mapcount: 0 [ 979.487786] flags: 0xfffe0000008100(slab|head) [ 979.492361] raw: 00fffe0000008100 ffff8880549fa600 0000000000000000 0000000100000003 [ 979.500221] raw: ffffea00024d0e20 ffffea00013f31a0 ffff8880aa800c40 0000000000000000 [ 979.508077] page dumped because: kasan: bad access detected [ 979.513764] [ 979.515369] Memory state around the buggy address: [ 979.520276] ffff8880549faa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.527614] ffff8880549fab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.534952] >ffff8880549fab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.542289] ^ [ 979.548759] ffff8880549fac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.556093] ffff8880549fac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.563429] ================================================================== [ 979.570765] Disabling lock debugging due to kernel taint [ 979.582841] Kernel panic - not syncing: panic_on_warn set ... [ 979.582841] [ 979.590223] CPU: 1 PID: 24239 Comm: syz-executor.4 Tainted: G B 4.14.158-syzkaller #0 [ 979.599293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.608629] Call Trace: [ 979.611197] dump_stack+0x142/0x197 [ 979.614818] ? kobject_put.cold+0x2e7/0x2f9 [ 979.619126] panic+0x1f9/0x42d [ 979.622309] ? add_taint.cold+0x16/0x16 [ 979.626260] ? ___preempt_schedule+0x16/0x18 [ 979.630683] kasan_end_report+0x47/0x4f [ 979.634668] kasan_report.cold+0x130/0x2af [ 979.638879] __asan_report_load1_noabort+0x14/0x20 [ 979.643786] kobject_put.cold+0x2e7/0x2f9 [ 979.647929] cdev_put.part.0+0x39/0x50 [ 979.651794] cdev_put+0x20/0x30 [ 979.655050] __fput+0x648/0x7a0 [ 979.658304] ____fput+0x16/0x20 [ 979.661620] task_work_run+0x114/0x190 [ 979.665489] exit_to_usermode_loop+0x1da/0x220 [ 979.670077] do_syscall_64+0x4bc/0x640 [ 979.673959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.678791] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.683962] RIP: 0033:0x414291 [ 979.687142] RSP: 002b:00007ffeb4307500 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 979.694825] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000414291 [ 979.702074] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 979.709319] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 979.716567] R10: 00007ffeb43075e0 R11: 0000000000000293 R12: 000000000075bfc8 [ 979.723825] R13: 00000000000ef01f R14: 0000000000761400 R15: 000000000075bfd4 [ 979.732521] Kernel Offset: disabled [ 979.736149] Rebooting in 86400 seconds..