[ 37.805521][ T27] audit: type=1800 audit(1554689811.122:26): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.843857][ T27] audit: type=1800 audit(1554689811.132:27): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.866399][ T27] audit: type=1800 audit(1554689811.132:28): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.771578][ T27] audit: type=1800 audit(1554689812.112:29): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. 2019/04/08 02:17:05 fuzzer started 2019/04/08 02:17:08 dialing manager at 10.128.0.26:45883 2019/04/08 02:17:08 syscalls: 2253 2019/04/08 02:17:08 code coverage: enabled 2019/04/08 02:17:08 comparison tracing: enabled 2019/04/08 02:17:08 extra coverage: extra coverage is not supported by the kernel 2019/04/08 02:17:08 setuid sandbox: enabled 2019/04/08 02:17:08 namespace sandbox: enabled 2019/04/08 02:17:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/08 02:17:08 fault injection: enabled 2019/04/08 02:17:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/08 02:17:08 net packet injection: enabled 2019/04/08 02:17:08 net device setup: enabled 02:18:46 executing program 0: syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x0) r0 = semget(0x0, 0x7, 0x400) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000040)=""/235) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='wchan\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x422, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000300)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff3000/0xa000)=nil, 0xa000}, &(0x7f0000000380)=0x10) r3 = getuid() getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) fchown(r1, r3, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000480)='wchan\x00'}, 0x30) waitid(0x3, r5, &(0x7f0000000500), 0x20000000, &(0x7f0000000580)) ioctl$int_out(r6, 0x2, &(0x7f0000000640)) syncfs(r1) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000680)=""/246) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000007c0)={0x0, 0xfa, "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"}, &(0x7f0000000900)=0x102) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000940)={r7, 0x3}, 0x8) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000980)=""/200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) execveat(r1, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='TIPCv2\x00', &(0x7f0000000b00)='usertrusted<-+nodev%\'\x00', &(0x7f0000000b40)='wchan\x00', &(0x7f0000000b80)='wchan\x00', &(0x7f0000000bc0)='TIPCv2\x00'], &(0x7f0000000d40)=[&(0x7f0000000c40)='wchan\x00', &(0x7f0000000c80)='wchan\x00', &(0x7f0000000cc0)='GPL}system\x00', &(0x7f0000000d00)='md5sum#em0\x00'], 0x1400) capget(&(0x7f0000000d80)={0x39980732, r5}, &(0x7f0000000dc0)={0x6, 0x6, 0x7f, 0x0, 0x3, 0x2}) removexattr(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)=@known='system.advise\x00') sendto$unix(r1, &(0x7f0000000e80)="d0ee889473d23f8ab7dc18e710c4cc7aaf4de2e57d1e92e2ce4ce24a52ea888ece7f2d98662bb7dab5efbbe0fe89d7551df1a1251624c8d2f6ccfb5626dbfd6ce71ceb7b14c0877740ed5deecc17dba89ab3ac4f5ab7c85815a18901e75ba119ccbd902ad9faf2e752ed05d399a088e9fa2ceba75f8a31440b8b9e4dbf3ac4ed5d10f4a4f7ca61253dad00ee4bdbf2ce0258684744691490b2fd51859fed0a0af5a1a0e7d945070dec90f193dd8c91fa4c5f9f900c1d0286809c948976240658fcbca00c740154615af44920c06a6a12a86e320a606da5f199a8990e31335d24000b", 0xe2, 0x24044080, &(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000001000), &(0x7f0000001040)=0x4) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000001080)) io_setup(0x1, &(0x7f00000010c0)=0x0) io_cancel(r8, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x5, 0x100, r6, &(0x7f0000001100)="052c6987a4ec588069dfbd524576e62072ae4fc17f87ffe7bacfac3c1684c92eaccf3233e56eb282c5879320f97d4715d1a07ec0eb85dde96d3aac681fa539bd497f99c8f81661176f9f5dc87debe3d4da099306bf536ea99c1c9dc0b119b1f7fd3aae871e327a825de6b5", 0x6b, 0x7f, 0x0, 0x2, r1}, &(0x7f00000011c0)) syzkaller login: [ 153.468335][ T7864] IPVS: ftp: loaded support on port[0] = 21 02:18:46 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x130) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)={'filter\x00', 0x75, "0a2f035962c7e8efc490e8dcc564419b22b63095a41ddd4df8f14f9e7560e41bc7dbf9d68f95a834faae3fe1e333e0f051db4c77ac72e1938c904a55c0cb84500d25bb3714a111785099832be96aec2ef5dae364fc004f1ad096336e19de703df45fbce4d304d5b5f1853d2e3578e98f47053b7cc1"}, &(0x7f0000000180)=0x99) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000200)={0xe04b, 0xb1, "8428de64060b88e3ecb87d2239577819c0ca7629fad0e169e793b8d57955d9b1e75712c91309488d92e1a950cdd5ca25258ba424482e96a45912ad103bb3b34c5e7ef9b6b1eff50870534e20fbb11ec30c2c8f5baa0e56d18021ebe9baabe27bc10450386cdb920cb201ab320a635df934a59b7d49c93a86e6ee00265ffac4909dd7066e2a15abee6b65f2ee358078dd7b02d1beb10ba4118e168d5ab8750df518c942b73669f11975f0b24489d127669c"}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x3, 0x0, [{0x0, 0x0, 0xfffffffffffffffe}, {0x314, 0x0, 0x2}, {0xbff, 0x0, 0x7}]}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x5f8, 0x0, 0x238, 0x238, 0x138, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x80, 0x8001, 0x4, 0x6, 0x5, 0xfffffffffffff455], 0x3, 0x8c}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x27, 0xe, [0x1d, 0x3b, 0x33, 0x9, 0x26, 0x29, 0x17, 0x14, 0x38, 0xa, 0x6, 0x2, 0x28, 0x18, 0x15, 0x1e], 0x0, 0x7fffffff, 0x8000}}}, {{@uncond, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv4=@local, @ipv6=@remote, @gre_key=0xe11e, @icmp_id=0x67}}}, {{@ip={@broadcast, @local, 0xff, 0x0, 'nr0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x7f, 0x0, 0x16}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x220, 0x100, 0x0, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x9, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x67, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'bcsh0\x00', {0xfffffffffffff000, 0x2bd8, 0x2, 0x5, 0xfffffffffffffba4, 0x9c00000000000000, 0x4, 0x80, 0x20, 0x18}, 0x3}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @gre_key=0x6, @port=0x4e20}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x658) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000a00)={0x5, 0x0, 0x4, 0x40002000, {}, {0x5, 0xc, 0x6, 0x1f, 0x7ad, 0x2, "787c4e7f"}, 0x6, 0x4, @offset=0x7fffffff, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000a80)={0x40000000}) getsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000ac0)=""/82, &(0x7f0000000b40)=0x52) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r3, 0x10, &(0x7f0000000bc0)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f0000000c00)={0x2, 0x1, 0x4, 0x0, r5}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000c40)={'veth0_to_bridge\x00'}) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000dc0)=0x1000, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000e80)={r6, 0x7}, &(0x7f0000000ec0)=0xc) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000f40)) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000001080)) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r7, &(0x7f00000011c0)={r3, r4, 0x10000}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001200)) setxattr$security_selinux(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='security.selinux\x00', &(0x7f00000012c0)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x2) lsetxattr$trusted_overlay_origin(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='trusted.overlay.origin\x00', &(0x7f0000001380)='y\x00', 0x2, 0x2) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x60) ioctl$TIOCSTI(r1, 0x5412, 0xffffffffffff8001) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000013c0)={{0xff, 0x7}, {0xffffffff, 0x9}, 0xa1cc, 0x2, 0xb0b}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001440)={r6, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @remote, 0x3ff}}, 0x0, 0x81, 0x80000001, 0xb, 0x1}, 0x98) [ 153.592785][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 153.668367][ T7867] IPVS: ftp: loaded support on port[0] = 21 [ 153.711820][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.722188][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.730775][ T7864] device bridge_slave_0 entered promiscuous mode [ 153.757462][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.765616][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.773696][ T7864] device bridge_slave_1 entered promiscuous mode 02:18:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000001c0)={0x4, 0x8, [0x3, 0x8]}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000200)) unlink(&(0x7f0000000240)='./file0\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0xc, 0x4) fgetxattr(r0, &(0x7f00000002c0)=@random={'security.', 'cpuacct.usage_user\x00'}, &(0x7f0000000300)=""/4096, 0x1000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000001300)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001340)={0x7000000000000, 0x18, [0x8d, 0x7, 0xffffffffffffffbb, 0x10000, 0x1, 0x101]}) sendmsg$rds(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x40800}, 0x20000800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000014c0), &(0x7f0000001500)=0x14) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001540)={0x11, 0x2, 0x3}) modify_ldt$read(0x0, &(0x7f0000001580)=""/67, 0x43) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000001600)={0x4, 0xfffffffffffffffb, 0x8000}) setxattr$trusted_overlay_origin(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='trusted.overlay.origin\x00', &(0x7f00000016c0)='y\x00', 0x2, 0x3) fanotify_mark(r0, 0x0, 0x40000000, r1, &(0x7f0000001700)='./file0/file0\x00') lsetxattr$security_smack_entry(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.SMACK64IPOUT\x00', &(0x7f00000017c0)='trusted.overlay.origin\x00', 0x17, 0x3) syz_extract_tcp_res(&(0x7f0000001800), 0x6, 0x100000001) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000001840)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001880)) write$P9_RREADLINK(r0, &(0x7f00000018c0)={0x16, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001900)={0x0, @in6={{0xa, 0x4e22, 0x8, @rand_addr="9c3d63428d295aa3d5e7c84d5a075bb1", 0x1}}, 0x6}, &(0x7f00000019c0)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001a00)={r2, 0x1}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001a40)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000001b40)=0xe8) getresuid(&(0x7f0000001b80)=0x0, &(0x7f0000001bc0)=0x0, &(0x7f0000001c00)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001c40)={{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in6=@remote, 0x4e21, 0x101, 0x4e24, 0x3f, 0x2, 0x0, 0x0, 0xbf, r3, r6}, {0x1, 0x80000001, 0x400, 0xa0ea, 0x9, 0x7, 0xefc, 0x3}, {0x8, 0x5, 0x8f, 0x2}, 0x2, 0x6e6bbf, 0x2, 0x1, 0x3, 0x1}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d3, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x3501, 0x3, 0x3, 0x7fff, 0x10000, 0x759, 0x2}}, 0xe8) sendto$isdn(r0, &(0x7f0000001d40)={0x1f, 0x101, "8f085c5b9ffd6d8d018376316be9fbb9f3a9a710cd4d016c756d4ed793587b1b9b922942dc0605747d439b09c4475080edc15e3aa8399be4766c4125ef1eadb14fae998707adad12a29a783f9dc293298dd919002ae20ddd86eae06eee37"}, 0x66, 0x20008080, &(0x7f0000001dc0)={0x22, 0x0, 0x8, 0x1000, 0x1ff}, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xfffffffffffffffa) r8 = getgid() getgroups(0x4, &(0x7f0000001e40)=[0x0, 0x0, 0xee01, 0x0]) fstat(0xffffffffffffff9c, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000001e00)='system.posix_acl_default\x00', &(0x7f0000001f00)={{}, {}, [{0x2, 0x1, r5}, {0x2, 0x1, r5}, {0x2, 0x7, r7}, {0x2, 0x0, r4}, {0x2, 0x1, r6}, {0x2, 0x1, r5}], {0x4, 0x2}, [{0x8, 0x2, r8}, {0x8, 0x1, r9}, {0x8, 0x3, r10}, {0x8, 0x7, r11}], {0x10, 0x6}, {0x20, 0x4}}, 0x74, 0x3) [ 153.842691][ T7864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.864846][ T7864] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.903910][ T7867] chnl_net:caif_netlink_parms(): no params data found [ 153.936133][ T7864] team0: Port device team_slave_0 added [ 153.968336][ T7864] team0: Port device team_slave_1 added [ 154.026995][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.044164][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.052156][ T7867] device bridge_slave_0 entered promiscuous mode 02:18:47 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1, 0x3, 0x200, 0x3}, {0x1, 0x1, 0x3ff, 0x8}, {0x400, 0x8, 0x1, 0x1}, {0x7, 0x5, 0x5, 0xffff}, {0x6, 0x100, 0xb2dc, 0x7}]}, 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x80000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x422000, 0x0) ioctl$sock_ifreq(r0, 0x71b811da7eda08c, &(0x7f0000000100)={'nr0\x00', @ifru_mtu=0x2}) ustat(0x3, &(0x7f0000000140)) name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1008, 0x42f9, "62d615be368c69985d8ecc88f02dbecf4404c62d7229db8bc95852dc246963ae958c73468f3afda109748b8b37454bc1296c9196c33d2fd4676071b4dd41705beaa6cb19ca6e04588fb11dc5384988a22e8d7a5f678abb0759ffc3ee15cf47500a0e9cd60fa6179440f351f291e608818135fd60541ce6cf239d1021eab11e326e43886465806e7c6a47969708f55781da7c7757f3dc324b866238ad5b820d3055e1cfaabc0dd2b31201e0819b8897ebba787907dd5c1f5f229dfe221aee6d32323f8aaece09ea64645d28f9ffee220206d7e934ac286e9022c280a3ddb0bfafe7ca9e7b4721402ad0b2e350f5e2cf11b9cc3b5013a74a1ef141f1f012b58d59563cf2c3cff92d89f2654038c1e5f134689cfc40d467b1f23beaf251d33a2e12d8bead6b86e263df785d1500e4e9d6927cecce7de27c9cb4d955c94cc98130602f7df26e529331cb0cce52472bba1ead1d421fae8895e9fe8a499dc7aa534c96b4b4b2f845eb017bb558ce8b63d81f95588107a863d1b111b1f0bcdc2732255c9f083db9bc977deecad26e295ea8111a04b3d7604b06eb8acb6cc258e0b34954db5e6a83c51234bdab560ec32f98e3f581937101fe0d33722eb18575ac67d69d8e474db2921b25a0e959c5ecddbaaba06f5f97c5484f2badacf89dd2955f4ac5012473a8887772879a75d469c55e17fe38c181dad93ce9dd01c79a52dc56b07738c69e31dad9cf6e1722554c0cf578ae1b51afef42c031de11301a923f612c80c93c12c5dc57fb80c96735f36c8f23e5f62bc76a2290c0af2ab47c6105027ce222f9e93c3d14c240f49121a21a9447ffcfcf469a31fe805c7f7c429a1236fc81843300553af12d478d56d18df56823919a7ae224222177cad40834f2f4c687b522cbc796e36072bb853c7cf42172f44ec8309f00f6eb6ce54e3b874b6acf04fbc0cfcca1ce4f5f7a3be931fba1685578e156bdd20d81198ebc6e44239377e8ed031e6a81a716a173657fa3165cb5e958d28ca7a2cf79eb493ef97bb09efced1ae4f8c3fc45b7cb95f4438fa6c8ede02442787b6785bac3f8e9d32230ebd38f6de0076c3ee8abeffcdee24936da74416aefb1cd7b8dfa39f20b1645703b7a28aaeda6ff7ef92d24953c3a2a198061633358b270beee4be71d42490b12a42c3e0bb095a70e8c62ba90610e057144d41436af5e4afde38832b482e5823357a7ee9d3cc29315935e8772c1bfb5037f036b641e8173d4bdece368317fa8a5c8237afb4f47e668078601ef27e90819dbca5803a1f149aa137f144c104f89457552d323cbbb9ef19428b678b3a082b306897d213ddf7d5436b84ee9c3d8b0dc4eeefe0a2c944e03be0efccfe68afaa8fcb20d406f0ac7cd5259275264225bcb48811188610f45643a4c67b51cac22d958af16f2cdbb580e0330419702b79b70591141bc82adfc4179b9776e4ff79652c8cfc8110052096a4b1b1e1dad6357f59db111d0b23d646097b39a224bd002222be71a9809846b48cd25dad18dd90cbf79ca276557cb5bf93660d2829217b3d070bc2b77cc326f814a7640bc58fc60e2c7f54c4cfc4d8f25d7b3f649d7d8328f29cf5609eeebb1d6d6c53d99a2dc51f464ab8334a13046502bb96cadd067721534ec09712716b208f8c7352ba4a34a0d1b58ad7bfd8b2d86bed5c009dd32f1a3dabd52a2f31156d0f0148435f5f63a95e9020a02543e35b8466300dc409566a644717f99850fb9712435d9d0d81a7dee6e8368300c36a0aa2ec415ad8fe0167d3e3ccfdab901103c4fa632b5f1a4f88da95cabd7c29a5c265e62ab7d8033b23dd8af8923123f8009c3934734dd941b29cab1bccc2f6ad3b080ed8f849d517ab3aa860ae35d59df33d982fdd81bc681a11f1801fe90cd81b0ff99bacf141c80d4ad5aef69ddd333e0b4fa59bc55b5489ea400290b7f3970572c3a721f9ea1333b56095f3cfdcac91d1f10a6015f1c486e09517a43afee69ab04fb5a79d3cdf6d256c8dedbe712ef349b13d6aff7db79174173f7b906cf253e6bb358973aa9158ee2308f5dda4789110ef18a42ef5f65484bc85a8e648727ea2e778746f5aaf9ba9855672883c812f3a429cc315be83a2fc9bf6dcfe06b77c0f7252400bae03459b9c787092155e0b329431126fc18268cd012609b9557f3a465061ee5557457ff16267ee9b640ef92dfad4c6f553110012bd7b9b6b761433e18c0632dbed73c17dcd7f22cd7f738260aa83ff4a6f91dc335bb0f6cf3a3be1a80403819853ea0d950360bcfbae8db84e14130bd86b08cdae6ee167116da15ac992c68a8b4ec07116e6d11295d88a4bc734b582083f697d0ec67d91279612a60d1ba33f1d2623f735524ea84c81b3636d0dfcce753df8d6f9d7d2d36a7420b25956e9569c7aaacead36cebc4eb76506fb4ab70b0939a8cdc832e7c8bab6a6c60c5043a621b22ee8f18a1d2497a165efdaf6c102a22479f5e661c8a0859c9193eac11d79c98cefe6f1bd33195e6927370882d51c9a405ee50b1674384944fdb9f89e94def58edbc004922b454adeb27e3b9e93c13db900941012128d327ecf836f6df898d04bcd85573ab703ec670d26773f1913b483cc5ab9a4407fe6277a166eb1f55cfd5bc765cff0495c86d03e00ec0b2f529be7ecb4a36fb0dcd6a160f3ae68dbeb1f139ed6589701129b197e3d93fe060453dcf16d1c22a394193313825a902cff571fdaa4157f64b366b599504e3ce934fb853035e8c57237a5149cb35d08baee104d4b43ac98ce60b0ada22c01fee2beb1e0f4951eafc776afd5ccd7daa27ca0e52c6d5e2e5e36a7a5674878c716b069a7e6390f8e193e58237e4c162f809e6e3f7181af52744f8711a48feb55183c0ce7812e53fe3128d38640bd0df24e0c48b73b993d08041c51dcc1d61ea90142c3c4ebe3608c9a3b119dcd4d5565a413031bed54aa296694aac9c3adf9c5fc311e4753feba115e17a51aa3d30ca8d98f24b1c7d957f73214e2953432bcaaafc4552e7fb49466e60a02b2060a84514de984b9e157de271b5e4c40d5aa9eee833fc14e3013a193c4327c88af4d5fc99a20e1f1c7ae6f3a9b4571038cb5743cee9f775ee8ec0dffd66633eda2a7315441ce8198d592d54959727dd622ccdad770048359191ae9b28e0fefde51f87bbed8897dfd72621b7befc25d5f2a21841c802474e05e997c24abff5e4dc81d55846a55dd8fdbed7e61ccb17ad9d6d1a9141c5f03ac38488b772557ba0b3266d9323e7ec887825fcb8acced678afb57b858b94915826ff9617fffdcd7088397e26efcb76475e3d4d4faa9cec2b2f3ad284c36b6c53795d34b0bf2072a375b5788bae3660aab274af0675477660e31dadb8f7df6196500acd47e7b7a6e2792fe2b5b4f7eb9e3fa4fc926922b54d174843622f50f273dba7567f0499880cb00590a0ce71c001d1bb56adc4ad82ed395d5c49ed2ade575be2258138b0b3b988d932426323b8cc3265ebc0e3932ed042ba3834c73a46a69759a3634fa26592f47167b43a35b1396e7ff6370b3a09b094c9f8c79c4dced4afeef7e3e2f83db9062bc8c14397f8b84baf2befb996f6613e7185b927daf4152b011d633e404568f769a3ea1df0a7f50e78bf52445961857bd6e68d814fd20a97c176e7b52339d4d57c3225ac55a3e41ffce27cfb6a7723e50fc5f092f565f5aaef362ee28f1e240ff09dcb8eaa4f646b93525cf5b7928cec746ac90f6f04d8bc98b39319027fdb6cb4fdd199bb6bd450e4db4d88acd57300da1a73c9e0333a5c76acc6361b3c9122ed9e9ea45f82b0492649ede94f45244690a2f063e0563641bc5d6b8e3ffe2c2b6927eae1df76fad4f06299a386da07fdb4a4dc3ea876a0c77bac592184bf4e30ebff4c125f86e4bb153c1418346772ec9e604fe7374a953ba998337b330394a46ac59269ab6deb4e96e1a098390875855d6e96ab3a0de7470c8e29561cd5d08cb286cad60ff3826f5955b2fb661da795c5161aeb65263986bc13e832435647a50292d316182eaa31b97934e3dbf92b77edbefa28f3a3a8ceb6bf2c3cf14f53a5bb680c95efcd63b381d652faf93dbb912a82df917fe413e9f44ac5b2715846b25a078eb1fbf77dfdb9515f62ef7b2e90e73a88662b1392d4e6fcdb4b551c5dac7f01093e40279277aac5576223476bccf572620910b2fb0e7ed6080d5bf3bbdabe1c5126c38a09aaf1c3d2b205a0e14ad8221fc94376c704a13849504a695336e06958d32947b645c40e167cd6d1d696744d2e9d05d3618c129541aea14018787c3e2fc1a7381b5091575de0fd203cf101b3b3bd4802c8ce741719514bf3914fb79fd1ba63073f4d32cd72bc85ec178ac4e64d041cb68bdb12bca55560f81219fc7951509d9f94b87df41f223cf3eb109ec92f21e4edde98289d5b2c2094ff573faf029220acef57f9a678c332538ec52a758fe68905f965d0e514933f6134253515a0cf3874f28ba8468f1e13f7d31c99e789dd83068f3f74a006839bc450abc30ce6de090f328eb663f845c279026c726f94ffa435d282add9a7e68047575c69c1000c58741e8e61dbccc0a0e7df2f44882bc02b9c47a25d84dcd432e10c9647aabcdb3418c6ace0efc0f525bd6a2e515333390764a42cf28a4531b867f4c33512f28e20b61c87d5007e90f4c686a81b6ca20f18de79d8adfde69dde2a4ba619eb95933442d7b9300dbba02c52f045f493de7a3004cebbf98ceef67bd41d038a11f9ac8a0172a01826d5dabcd2e4b07a4c61889a32da3e51b16f5226d09856d63133da8ecf3c747ac935943596195cc6d55b3c9f07f4fce522fc959803df404bf44b9fd90b7452bb82e07ab1e7f6f93b500105f572fbaf9f9079d3755a9cd6ae6dfea10c2e3748b8a883e17cc73b3e69bd34da82b2dee94de39fe994161ebdd47e0584cd08e8545800d3a0243cd982df48527ff16c5d13d9268d3d18e69a3937d33927b7a99a00f3bde7cc4f6172f3d0cf11e7eec7ecada8bb3a1612826ae9305b9273619adb4ef249ec69782333e935981b02411bc49b5ede0dd983afa045c46c93659a22886a9b7fb0ec3dc07424c938b5d909fb4778f17a5d050a8089d0ae4d6708c1e64993ca0f08c5c7526b9150b8aeff80ec8d843659d4771bd44b61eea90d09c1b6826c95af916d7363c29a0989ee7cdd579db08c941b8188c7e6d1fc978fbf44df5427c958df8182b08ea32799f9685564e7870f60d74072c300f3738da09ea58a2b79a4bfb3b6c6606b3ba0dd8fe28feac760e513d5a4767b1e7aee6b5055877109d790c6a6d23d22db483364648e89c66db9396d93130258610f977f188bf4e3f7055a6944a134ec023421c0b1bd2e46e80ea1fa408390a00d3500b7ad1af72155a311a000fd8f15eedc59c45b36a8341c8928992f6db1d0809daa36a5747760aa25762a9fadc163dfe5cdf02dbf02e1c4e6ef7854e2cd4957bbcf8513eaf1d0a72768b27082c374aedb24e1866e6c66133b1d1041c12dbb16a1a44247cfb59c746384b4e9c93da27d67cd90b826e73b8e2f6a7c4c7097be0adb869f1c23beb410cebd473548d4780cda65db12c0c3139b4eb3b84e5b559fb318b421468369c705ffade53b941357737b3fd5153bd180c97c2a1311d9865fb7416cd4b81eb2cb5e412a1ba80b3a90d8e45049a8ef5d7b6deffa8c5b3ed51c63273d7e033e9afe19283c1ae744faf9529d5f99850efdef939796d43cb9fcd0c2b1a21f62bdeb658ea0b725dbbd4bccde76f334922fccd50ba386b08a9513aed3"}, &(0x7f0000001200), 0x1000) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001240)={0x2, "5fe6fcb596e0d473844b0367b8945c9c16b90717e4689ce2b7a3d744a344403c", 0x1, 0x1}) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000001280)={0x1, 0x4}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000012c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001300)) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000001340)={[], 0x5a66, 0x200, 0x1, 0x0, 0x6, 0x10000, 0xf000, [], 0x5}) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001500)={0x0}, &(0x7f0000001540)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001580)={r2, 0x0, 0x10}, 0xc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xe8, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffec}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43a64f43}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe421}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0xa000000000000000) fcntl$getflags(r0, 0x40b) accept$packet(r0, &(0x7f00000017c0)={0x11, 0x0, 0x0}, &(0x7f0000001800)=0x14) read$eventfd(r1, &(0x7f0000001840), 0x8) rseq(&(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0, 0x7, 0x3, 0x68, 0x3}, 0x4}, 0x20, 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x60, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @remote, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x4c051) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001a40)) recvfrom$inet(r1, &(0x7f0000001a80)=""/99, 0x63, 0x40012163, &(0x7f0000001b00)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001b40)={@remote, 0x7b, r4}) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001b80), &(0x7f0000001c00)=0x60) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001c40)=""/4096) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000002c40)=""/22, &(0x7f0000002c80)=0x16) [ 154.074819][ T7870] IPVS: ftp: loaded support on port[0] = 21 [ 154.097128][ T7864] device hsr_slave_0 entered promiscuous mode [ 154.198037][ T7872] IPVS: ftp: loaded support on port[0] = 21 [ 154.224457][ T7864] device hsr_slave_1 entered promiscuous mode 02:18:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'caif0\x00', {0x2, 0x4e20, @broadcast}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0x9, 0x7, 0x1}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x5}}, 0x1ff, 0x6}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r3}, 0x8) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000240)={0x7, 0x800}) statx(r1, &(0x7f0000000280)='./file0\x00', 0x1000, 0xb14, &(0x7f00000002c0)) ftruncate(r0, 0x5) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000400)=0x1) signalfd(r1, &(0x7f0000000440)={0x401}, 0x8) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, [], [{0x9b70, 0xffffffffffffffe7, 0x5, 0x80000001, 0xed6b, 0x1ff}, {0x6, 0x5, 0x3, 0x6, 0x400, 0x10000}], [[], [], [], []]}) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000640)) ioctl$TIOCEXCL(r1, 0x540c) syz_open_dev$video(&(0x7f0000000680)='/dev/video#\x00', 0x401, 0x0) fcntl$addseals(r2, 0x409, 0xd) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000980)=0xe8) r7 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) r9 = getgid() getgroups(0x9, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00]) r11 = getegid() setxattr$system_posix_acl(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='system.posix_acl_access\x00', &(0x7f0000000a80)={{}, {0x1, 0x3}, [{0x2, 0x0, r4}, {0x2, 0x5, r5}, {0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0x5, r8}], {0x4, 0x1}, [{0x8, 0x5, r9}, {0x8, 0x2, r10}, {0x8, 0x4, r11}], {0x10, 0x2}, {0x20, 0x1}}, 0x64, 0x2) write$P9_RSTAT(r1, &(0x7f0000000b00)={0x66, 0x7d, 0x2, {0x0, 0x5f, 0x80000000, 0x7fffffff, {0x80, 0x0, 0x6}, 0x10080000, 0x0, 0xe81, 0x6, 0x15, '/proc/self/attr/exec\x00', 0x0, '', 0xb, '#vmnet1lo+^', 0xc, '/dev/video#\x00'}}, 0x66) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000b80)=""/33) [ 154.287247][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.304184][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.312195][ T7867] device bridge_slave_1 entered promiscuous mode [ 154.370674][ T7867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.412674][ T7867] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.459227][ T7867] team0: Port device team_slave_0 added [ 154.481743][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.486238][ T7874] IPVS: ftp: loaded support on port[0] = 21 [ 154.489423][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.503363][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.510713][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.541241][ T7867] team0: Port device team_slave_1 added 02:18:47 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x62) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0x6, 0x2, 'client1\x00', 0x1, "9bb6222205fcaf56", "ec04c6f72b99c13d3e8ef1fcc6c30a5340c60cc7b96b5635eb18f1b9ba8ed19c", 0xfcc, 0x9}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e23, 0x0, @rand_addr="aff21af666caba726271dc71d91c2973", 0xacd5}, {0xa, 0x4e23, 0xffff, @loopback, 0x8}, 0x100000001, [0x2, 0x129, 0x7, 0x7fffffff, 0x0, 0x80, 0x4, 0x1000]}, 0x5c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x8001) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/164, 0xa4}], 0x6, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd8, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe092}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4094) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000ac0)={0x20, 0x92e7, 0x7ff, 0x80, 0x6, 0x3, 0xf4, 0x8, 0x2, 0xfffffffffffffffe, 0x4, 0x9e}) readahead(r0, 0x3, 0x3) ioctl$KDADDIO(r0, 0x4b34, 0x7) getpeername$netlink(r0, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r2 = socket$isdn(0x22, 0x3, 0x11) openat$ion(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ion\x00', 0xa2200, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000bc0)={0x103, 0x29, 0x1, {0x745, [{{0x28, 0x3, 0x5}, 0x9, 0x8, 0x7, './file0'}, {{0xc5, 0x1}, 0xfffffffffffffffc, 0x80000000, 0x7, './file0'}, {{0x1, 0x2, 0x8}, 0x4, 0xfffffffffffffff8, 0x7, './file0'}, {{0xa8}, 0x6, 0x1000, 0x7, './file0'}, {{0x0, 0x1, 0x3}, 0x8, 0x27, 0x7, './file0'}, {{0x80, 0x1, 0x5}, 0xbf, 0x4, 0x7, './file0'}, {{0x6, 0x2}, 0x4, 0x1, 0x7, './file0'}, {{0x40, 0x2, 0x7}, 0x10000, 0x101, 0x7, './file0'}]}}, 0x103) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000d00)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getxattr(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)=@random={'btrfs.', '/dev/ion\x00'}, &(0x7f0000000f40)=""/196, 0xc4) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000001040)) read(r2, &(0x7f0000001080)=""/35, 0x23) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vsock\x00', 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001100)='bridge_slave_0\x00', 0x10) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000001140)) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000001180)) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000011c0)=0x6, 0x4) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000001200)={0x16, 0xc, 0x4, 0x3, 0x7, 0xff, 0x0, 0x33, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000001240)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001280)={0x2, 0x5}, 0x2) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000012c0)=@req={0x7fff, 0x400, 0x4, 0x5a67c7ca}, 0x10) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 154.591366][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.616807][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.743923][ T7878] IPVS: ftp: loaded support on port[0] = 21 [ 154.756812][ T7867] device hsr_slave_0 entered promiscuous mode [ 154.805038][ T7867] device hsr_slave_1 entered promiscuous mode [ 154.891681][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 154.987440][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.009219][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.016664][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.024997][ T7872] device bridge_slave_0 entered promiscuous mode [ 155.032602][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.039798][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.047803][ T7872] device bridge_slave_1 entered promiscuous mode [ 155.123104][ T7872] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.134385][ T7872] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.151839][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 155.161434][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 155.188833][ T7872] team0: Port device team_slave_0 added [ 155.223740][ T7872] team0: Port device team_slave_1 added [ 155.239664][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.250089][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.273835][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.281678][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.290131][ T7870] device bridge_slave_0 entered promiscuous mode [ 155.334663][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.346421][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.353571][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.363871][ T7870] device bridge_slave_1 entered promiscuous mode [ 155.426527][ T7872] device hsr_slave_0 entered promiscuous mode [ 155.464675][ T7872] device hsr_slave_1 entered promiscuous mode [ 155.534415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.543270][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.551878][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.558987][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.569633][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.578463][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.587746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.597318][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.604478][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.622709][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.630036][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.637761][ T7874] device bridge_slave_0 entered promiscuous mode [ 155.647969][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.655141][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.662763][ T7874] device bridge_slave_1 entered promiscuous mode [ 155.687686][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.698952][ T7870] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.708089][ T7878] chnl_net:caif_netlink_parms(): no params data found [ 155.718985][ T7874] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.730398][ T7874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.755082][ T7870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.781383][ T7874] team0: Port device team_slave_0 added [ 155.793239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.802493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.810590][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.827364][ T7874] team0: Port device team_slave_1 added [ 155.852362][ T7867] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.871370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.880141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.896450][ T7870] team0: Port device team_slave_0 added [ 155.903811][ T7870] team0: Port device team_slave_1 added [ 155.937791][ T7864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.948978][ T7864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.965081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.973287][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.982711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.991480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.000294][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.009332][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.016438][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.024454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.033288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.042155][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.051028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.106861][ T7870] device hsr_slave_0 entered promiscuous mode [ 156.154548][ T7870] device hsr_slave_1 entered promiscuous mode [ 156.194995][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.202116][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.213021][ T7878] device bridge_slave_0 entered promiscuous mode [ 156.253900][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.261672][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.272048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.280436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.289121][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.298397][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.306144][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.315432][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.324547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.333385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.342009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.350547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.359308][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.368515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.376940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.385577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.393875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.408970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.419291][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.426867][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.436802][ T7878] device bridge_slave_1 entered promiscuous mode [ 156.452770][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.516715][ T7874] device hsr_slave_0 entered promiscuous mode [ 156.584711][ T7874] device hsr_slave_1 entered promiscuous mode [ 156.671754][ T7878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.699614][ T7878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.715049][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.732278][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 02:18:50 executing program 0: [ 156.790351][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.808997][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.817260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.829143][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 02:18:50 executing program 0: [ 156.868391][ T7878] team0: Port device team_slave_0 added [ 156.890241][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.917924][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.945106][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.953556][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.960739][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state 02:18:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 156.972668][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.984626][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.993192][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.000338][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state 02:18:50 executing program 1: socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) mknod(&(0x7f0000000180)='./file0\x00', 0x448, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 02:18:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000005c0)={0x0, 0x9}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r4, 0x2a, "f34f0541ed52fe6a2fdd0ea8f70f24120a9dc682e0bd7818948ebb7f6ccfd7ddc9e49df2126fa07aa07b"}, &(0x7f0000000740)=0x32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r2, r5}) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x30) bind$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, {0x2, 0x4, 0x3, 0x100000000, 0xfffffffffffffeff, 0xcad}, 0x1b}, 0xa) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast1, @local}, &(0x7f00000003c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) accept$packet(r7, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000680)={0x0, @rand_addr, @initdev}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000940)={@multicast1, @local, 0x0}, &(0x7f0000000980)=0xc) getpeername$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) r17 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000780)="3e6444501480098b5d63", 0xa, 0xfffffffffffffffa) r18 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r17, r18) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000a40)={@empty, 0x0}, &(0x7f0000000a80)=0x14) accept$packet(r7, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x804e0}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b40)={0x3f8, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x138, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xed}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x12ebd51a}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xd43}}}]}}, {{0x8, 0x1, r13}, {0x184, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r16}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xffffffffffffffe0, 0x1, 0x3, 0xb16}, {0x4, 0xa5d9, 0x8ff, 0xfffffffeffffffff}, {0x100000000, 0x3, 0x6, 0x2}, {0x800, 0x2, 0x6, 0xffffffffffffff9b}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x92a1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r19}, {0xcc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) [ 157.019974][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.028005][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.060571][ T7878] team0: Port device team_slave_1 added [ 157.078075][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.116416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.125881][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.135750][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.145268][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.153797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.162342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.169510][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.177762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.190326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.198975][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.206078][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.215817][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:18:50 executing program 0: r0 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x1ff, 0x80000000, 0x8, 0x401, 0x5, 0x0, 0x7}, 0x145) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x22482, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x200, 0x0) unshare(0x2) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x4, 0x7, 0x2, 0x3e, 0x2, 0x39c, 0x38, 0x244, 0x6, 0x0, 0x20, 0x2, 0x0, 0x3, 0xfffffffffffffff7}, [{0x6474e557, 0x401, 0x3, 0x0, 0x0, 0x7, 0x80, 0xf8}], "", [[], [], [], [], [], [], [], []]}, 0x858) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socketpair(0x0, 0x2, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x2, 0x5, 0x6, 0x80000001}]}, 0x10) [ 157.228921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.239053][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.247743][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.256761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.265488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.273950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.302807][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.315565][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.324963][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.333063][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.341575][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:18:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xffffffffffffe000) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x3}) syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00') [ 157.350109][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.360014][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.369751][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.406107][ C0] hrtimer: interrupt took 26355 ns 02:18:50 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vsock\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000240)="fb3cfe94e112f4109c2726a7a9a954d761ba551d2d9e7060cdbe42c977013684905470a0bf1480a521b821de2e7d9053a67771ada26e7e010a11789e75d4b4c4813c89e4c45d485345580740b260886a15f3907d5c6babd91255dee1dd5ee938f2a4e99adc6abc9753792e5fe49199481ae826fd25d11d69567a1e6f9a398325b28a848c46a266fbd34576c4f6ab812535e384d9f544487419cffbbc912a900defae66823bb082908f2d9b222c733f1c60c9f37c0a8b49f4e7b4611c97e361e73d94ff05952e4cc213916aaaced785cf8043d313443e12c28bda43b1", 0xdc}, {&(0x7f0000000340)="5fbd4d61aa72cc7733f882786d0498bbfbf688cf35407159294952102c73d1c164c1512e7c0c146d6d024df3a2cc2f4e22727cd27c10f2569550cd4d5a2f6abcb481d1b6cfdf336fd427341b9a303d9454038bc7c712a56b5b333e4cb1c1ec99aa1b3f243f2f7bb598795a8b2d504e57199908b6f4533289fb5f17389b708eda6678ec9cba71ac71ecc764534810bb6c922f01c9fca579303f7710f246f3724c19b4e9bf03c7096e107cc61b980f1553a3dfb6e285aed0a5a0761b8652b8bca4bf04f1a1112f295f14f852d93920d57aa58ef83ac3e6bf65e4a9fb5313134b31b0", 0xe1}, {&(0x7f0000000440)="62ba6634520230754d8d9f3ea2a0cd0f81bed450c062d7707731eaaa9170e815672d73ed2235b2ab6d0c768bf7e3054113251c6bc0dde530c24fb5a2a28cf27f084496eaea59122de26bb4fa265175af08a0f29f91a37eb56571f5e96c6a835ec967c76ac77c07b9178fba10d3227469596616e989c602c68c3b91dcc1d41b3ac5e8c2e60b423deaa0b4a65f6bd3326179a657b91b6190f776c2352b5356979c97074843252385bfe245c5653c20cd09c959e20d3eaa092e", 0xb8}, {&(0x7f0000000040)="3ffde7a0a18910261f51f898ee20c484c5f29126976271450b7921f465906dc4dad4df699ba6e2f624eaf87e5b38b24126b9b3956efe7cda037269d634b7980a0d6d497893162d", 0x47}, {&(0x7f0000000500)="5dd75b37a4ad944b980a9edd33d8d08bcd21a00f8610c4f02c2559562424d02406d89b6722b310df74f4c10aac75e707f2316e3c989c847ba649877cc3a7adfaed79085c358ed2036b7f6f8a938d8bd19fbb2ec5c6cd9b38ba517a4436edb4b2230d29833cf7c469af3d97a307798af6a1bfb92bb37119cd20841fdc26dd49e20b3f6fca24f78dd24aa4507b3642eb2f5e526a5e71760a21bc01ae6e8e14c5bc685533c3a510579dcf2914ac8a5edd94f270e0ee4c0279e7", 0xb8}, {&(0x7f00000005c0)="e9fdc9b63473c6a45f08de9b4388af67b42f7b815390444ab00d5d2fe031b566c7dd27de85d3ac22b5dec4dd73dc955eeed96bf183023119ccc68da79fa54f50e0aaeec7cad7bd1f4473059c3d6e1374398f5ee2cec94f1e4fa9f0c64835580e66e7a1e84c51e8b9b025dab3a4a70faa0726c9c5473f8c2b5423c77314d01605f1330c89e059cb6a8f1113411274e00c6e3c288b57f6408c1ca8673fb7", 0x9d}, {&(0x7f0000000680)="2af1c8e08d021408bc6404703c05c9d2391986ae178993845b6ee7883552c5a5c416f59cbfa94c2dc5a13e69fcd2629744f9919e27c83b01bf80c69919c5caac9512212c45418b35d6126c9c5c966b094f602da5683b1dbaa5b88f7dc1212ef27b74f526599bac876fa95cd59b5c772f03ffe7527d373952e0f0e4a06f5fc37450761687c3907be4ff576dc90213932f0c1e97424016ca23e4ea0a17330b792d66371c901409c1135f912ccac86daf19a9c2b82c71d40588698bb20283dd109d855faeafda67b870e3d36fe3576fccba7facf21a0941b678277400af920d42b58c", 0xe1}], 0x7) r3 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffd11, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x378) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 157.427986][ T7878] device hsr_slave_0 entered promiscuous mode [ 157.473760][ T7925] Unknown ioctl 21376 [ 157.486178][ T7878] device hsr_slave_1 entered promiscuous mode [ 157.508421][ T7925] Unknown ioctl 21376 [ 157.549592][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.572325][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.582328][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.591065][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.600122][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.609514][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.618619][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.627184][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.636987][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.645817][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.653479][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.662191][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.671294][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.680257][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.687915][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.696319][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.704988][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.718132][ T7870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.731376][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.748256][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.757793][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.771259][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.800205][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.809787][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.819760][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.828720][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.837674][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.847063][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.856112][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.865645][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.883953][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.895821][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.917590][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.927654][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.939921][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.961473][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.988412][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.123837][ T7878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.151932][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 02:18:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r0, 0x0) [ 158.169876][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:18:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff, 0x400) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000140)) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000180)=0x3, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x2d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xffffffffffffffff, 0x0, 0x0, 'eql\x00', 'rose0\x00', 'lapb0\x00', 'syzkaller1\x00', @local, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0xb, 0x0, 0x0, 'tunl0\x00', 'teql0\x00', 'ip6erspan0\x00', 'team0\x00', @remote, [], @remote, [], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:iptables_unit_file_t:s0\x00'}}}}]}]}, 0x348) [ 158.196030][ T7878] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.245851][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.258409][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.285937][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.293398][ T7881] bridge0: port 1(bridge_slave_0) entered forwarding state 02:18:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 158.330289][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.340320][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.350705][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.361210][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.368372][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.379229][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.389002][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.451624][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.462530][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.472755][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.484996][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.493569][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.502432][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.512036][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.521875][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.531710][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.541193][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.561537][ T7878] 8021q: adding VLAN 0 to HW filter on device batadv0 02:18:52 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000080)={0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae03) 02:18:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x101000) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x95}}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) 02:18:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2400200) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000540)='./file1\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x4}, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffff9c, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) link(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) io_setup(0x1, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$smack_current(0xffffffffffffffff, &(0x7f0000000200)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000700)={0x7f, {{0xa, 0x4e22, 0x3, @loopback}}, {{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x108) r2 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x60) ftruncate(r2, 0x7fff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendfile(r1, r2, 0x0, 0x8000dffffffe) 02:18:52 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @sack_perm, @timestamp, @window={0x3, 0x4, 0x6}, @sack_perm], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f00000000c0)={0x1, {0x0, 0x0, 0x0}}, 0xffffffffffffff96) 02:18:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x3, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x2000004e20, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x47ffffffff8, 0xffffffffffffffe5) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x13f698e4b9e296e3, 0xfecf, 0x0, 0xffffffffffffff06) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xdb, 0x4, 0x8, 0x80000000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) 02:18:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 158.625628][ T7960] Unknown ioctl 21531 [ 158.634207][ T7961] Unknown ioctl 21531 [ 158.697630][ T7969] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.718950][ T7966] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 158.718958][ T7972] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 02:18:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xbee}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x72, 0x3f, 0x31, 0x35, 0x7b, 0x77, 0x30], 0x2d, [0x39, 0x31, 0x38, 0x38], 0x2d, [0x63, 0x39, 0x37, 0x31], 0x2d, [0x76, 0x74, 0x65, 0x77], 0x2d, [0x31, 0x0, 0x66, 0x77, 0x0, 0x33, 0x32, 0x77]}}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@dont_appraise='dont_appraise'}, {@fsname={'fsname', 0x3d, 'proc\x00'}}]}}) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x27, 0x0) 02:18:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x107}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="e7ac120555598ebb2af2c59817ab81cc0e1a5514eea643d487a1a2381c3eebcfd4b6f9f91e02ca6cd484a346584a281c43469d1266629e8562cbb32f8ee4ae3609dfd6098d1af47c076340", 0x4b}, {&(0x7f0000000080)="d7089ee007f3867bafbd6f47ed57c6da5db3e9ed57fef4391ea1617b63c3b4dcd73a7c97ade00b4ea0b914", 0x2b}, {&(0x7f00000001c0)="8ac5e523f94463ffa6a23e2086a83138464f42c07b6febbc711e073acf65be229aaf48662563", 0x26}, {&(0x7f0000000200)="bc59613918d93472698b68e3853353731ba6dfb42c9d511fe3b37b4ccb8fe891dc1a26f4c4c7efee366e7862291529821ffc84a564c31a7457343b4ed1e9d2429371d8d4377fa339c4c78125935579ef522902afbe617a60b36b678a6c3d9da7e9a5c0d312d64e1c3bc947c2614c845058f395d5e47c782fb87abe3983968aaf31d648df6d89387ce2e7b1c8bf395ec82514f14b2ac8b42d1df1d06b3773feb500d01de44c736bd7a362f71f840c4b3b07c948e4c0359c197efaae1735eb", 0xbe}, {&(0x7f00000002c0)="aa86d202aade68bee9dad30554a3497ad81f35504a043f94751931e8ca", 0x1d}, {&(0x7f0000000300)="630e5ff9f728bac474dd77a34ca5fe7e5b9f958eef5a5d20881733d588bbb21b128077bf78f8d1eeb471a50d1d0741025be83caa0e44091b1c4a30db06555f2b7406889f810839d2e54123916ecaf35696c3fa7b3480b386216a418c28d5d22de605e6280006d5d9f921538fa7a971b023e2a13b5ce6c12d3afddde5aef50433742b5d23d740b95ebc9aeeaeb6c937e0", 0x90}, {&(0x7f0000000440)="1ac771d81f31b137fcc5becf854fbed1e9ab269ac86dd3696e0395d3fa2cf4c858c44121771d9a985377111cb058e52c048e0d68ff9791ac955d2afca25e4f1ce92e1e690cef49a4318a61a4", 0x4c}, {&(0x7f00000004c0)="3aaa594c489a4b09c96c49d96b69f23228743ac71d538dbd90ccff73a613e7ada3d896a34e67b0b960cefa312b9715c6da1228850c68fb7ebd4eacd9c0f3fa6203d587c286342927f73ac90e3662d881c765163ed22fa29e5ffc0b12415fa4bc649f6ec221e15698e1debc12a400e58867edc60bce1ef5de858791156d31761d6c2bb47ad0f5469cda2d489af4da67b66aa44a9bb61d3f1f859d3b6666cb115cfb7b6fcf4f4d961d8310392210ab132857fb74f7246dda09667e9647a6510710d01309b6a7469794da4c2547ddcb0af52295031f7dcf03bba55240462944d2002b47fbfe05e8f9422deecc676345b307a38e7e", 0xf3}, {&(0x7f00000005c0)="6721fde9330413a2633162f2384a593354b1abf1b6dbba985f98d8b7238905c259848d5ff7f90b42b1d2a0b2adb7a90405567cca2bc799bb0533d76b8dc3c03f381cf0d4cdb031fcb5f9124d7e00286e601a03c999e8e18a3bdf233872a04081e3415ce3ffef2ce1e9ab8372447ffdbc0975a3b3a0558d197fd90caea3ae5797fb8880aba6b5a2080f44825e1580d043fb6c81d12d9093c8d10bac5c86119b580d7a7162e8fbb5065bdf75e29d1c896a8fe42ca3a57c69c1b34d070abf79ea6c97c6f98966994e85b19bc8d804aec90aaefe9b", 0xd3}, {&(0x7f00000006c0)="9d3d15018c0494bd3cc9b1d9200322f875c4d1f01d239bd9f977f1574b4cfcb2f74c27733b882ebd2b40e6d627dce3d19bd770112b7bce384d7c6e55cfb3b36ae430aeaf4c2963106a8be48cae70af85610a56318183ddbd517295c2f290f5caf337367a2a65f3cf2fc79e9ea9f4db4778f1a031376578f5c358d0e4b24efeca528f4cd1e3406ce80c", 0x89}], 0xa, 0x0, 0x0, 0x4000000}, 0x0) 02:18:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x100ffd, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1ff, 0x4) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{r0, 0x0, 0x1000000010000, 0xfffffffffffff000}]}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='veth0\x00') 02:18:52 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev, 0x0}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r7, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0)=0x0, &(0x7f0000001300), &(0x7f0000001200)) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev={0xfe, 0x80, [], 0x26}, @in6=@mcast1, 0x4e20, 0x1000000000000000, 0x4e22, 0x4d5, 0xa, 0xa0, 0x20, 0x5e, r6, r9}, {0x5, 0x4, 0x7f, 0x3, 0x3, 0x0, 0xffff, 0xd86}, {0x0, 0xdee, 0x1000, 0x2}, 0x4d, 0x6e6bbf, 0x1, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x4, 0x3, 0x1, 0xffff, 0x3, 0xfff}}, 0xe8) ioctl$UI_DEV_DESTROY(r8, 0x5502) 02:18:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:52 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x8200) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000001c0)={0x3, "62ebc64c8fc94fee47587203c8154f9b9aaeeb6e4c300c5859bc36a67050ce0e", 0x1, 0x40, 0x5, 0x2000000, 0x2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16]], 0x0) pread64(r1, &(0x7f00000000c0)=""/145, 0x91, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x5, 0xc3, &(0x7f0000ffe000/0x1000)=nil, 0x9}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x1}) 02:18:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000005100"/112], 0x4}}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x7, 0x0, 0x0) 02:18:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0xc03, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x6000000, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() r4 = getgid() r5 = getgid() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000440)) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r2}, {0x2, 0x1, r3}], {0x4, 0x2}, [{0x8, 0x1, r4}, {0x8, 0x4, r5}, {0x8, 0x2, r6}, {0x8, 0x4, r7}, {0x8, 0x1, r8}], {0x10, 0x1}, {0x20, 0x6}}, 0x5c, 0x3) 02:18:52 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2408000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, r1, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf3b}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr="8c2bf944bfb65439c82b79cecee55312", 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x20000) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)=0x81) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000300)={0x1, 0x0, @raw_data}) [ 159.173277][ T7996] input: syz0 as /devices/virtual/input/input5 [ 159.183704][ T8011] Enabling of bearer rejected, failed to enable media [ 159.234497][ T8017] Enabling of bearer rejected, failed to enable media 02:18:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @empty}, 0xab) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x7d3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x4, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x30, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x95881b2ce9a4b415}, 0x20004800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 02:18:52 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x204000) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0) 02:18:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/audio\x00', 0x400000, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001880)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001a00)=""/37, 0x25}, 0x1) fanotify_init(0x4, 0x48002) r8 = syz_open_dev$sndpcmc(&(0x7f0000001a80)='/dev/snd/pcmC#D#c\x00', 0x3, 0x462202) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000040)=""/73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="700100001200080029bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="000400008000000008000500ffffff7f0c000200d22bd1ab068f000008000e00ff7f000008000500ac080000080027000200000008000e00b3aa000004012b0008000300000000000800030005000000080003000f00000074000100190000000c000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="0920d4080500000085000000260000000179f0ff00000000181b0000", @ANYRES32=r3, @ANYBLOB="00000000000000001800000007000000000000001f000000180000000400000000000000ffffffff18140000", @ANYRES32=r4, @ANYBLOB="00000000000000009500000000000000"], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='syzkaller\x00'], @ANYBLOB="06000000e6000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/230], @ANYBLOB="001004000100"/24, @ANYRES32=r5, @ANYBLOB='\f\x00\x00\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000004000000"], @ANYBLOB="0800000010000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="06000000010100000000000000fcffff"], @ANYBLOB="100000000000000074000100070000000e000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="18160000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000003a000000000000001f00000077570000000000ff05f2010006000000ff2f18000c0000000385090000000000950000000000000085000000260000001800000001000000000002000500000018000000800000000000000008b950cd"], @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB='GPL\x00'], @ANYBLOB="0700000000100000", @ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="001104000100"/24, @ANYRES32=r7, @ANYBLOB="0f000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYPTR=&(0x7f0000001ac0)=ANY=[@ANYBLOB="8209000001000000"], @ANYBLOB="0800000010000000", @ANYPTR=&(0x7f0000001b00)=ANY=[@ANYBLOB="00010000070000000100008001000000"], @ANYBLOB="100000000000000008002e0000000000080023000400000008001b003f000000"], 0x198}}, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@delpolicy={0x50, 0x14, 0x203, 0x0, 0x0, {{@in=@dev, @in6=@loopback}, 0x2}}, 0x50}, 0x8}, 0x0) 02:18:52 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev, 0x0}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r7, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0)=0x0, &(0x7f0000001300), &(0x7f0000001200)) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev={0xfe, 0x80, [], 0x26}, @in6=@mcast1, 0x4e20, 0x1000000000000000, 0x4e22, 0x4d5, 0xa, 0xa0, 0x20, 0x5e, r6, r9}, {0x5, 0x4, 0x7f, 0x3, 0x3, 0x0, 0xffff, 0xd86}, {0x0, 0xdee, 0x1000, 0x2}, 0x4d, 0x6e6bbf, 0x1, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x4, 0x3, 0x1, 0xffff, 0x3, 0xfff}}, 0xe8) ioctl$UI_DEV_DESTROY(r8, 0x5502) 02:18:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4471, 0x2) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) bind$inet(r2, 0x0, 0x0) 02:18:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f0000000100)=""/126, 0x1033a) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 02:18:52 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x300, 0x110) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000200)=[{r2, 0xc0}, {r2, 0x10}, {r2}, {r2}], 0x4, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') timer_create(0x0, 0x0, &(0x7f0000044000)) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000000c0)=0x800) socket(0xa, 0x3, 0x8) [ 159.622068][ T8044] input: syz0 as /devices/virtual/input/input8 02:18:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:53 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='J', 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000e80)="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", 0x480, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0), 0x15) 02:18:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @empty}, 0xab) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x7d3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x4, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x30, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x95881b2ce9a4b415}, 0x20004800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 02:18:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:53 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev, 0x0}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r7, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0)=0x0, &(0x7f0000001300), &(0x7f0000001200)) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev={0xfe, 0x80, [], 0x26}, @in6=@mcast1, 0x4e20, 0x1000000000000000, 0x4e22, 0x4d5, 0xa, 0xa0, 0x20, 0x5e, r6, r9}, {0x5, 0x4, 0x7f, 0x3, 0x3, 0x0, 0xffff, 0xd86}, {0x0, 0xdee, 0x1000, 0x2}, 0x4d, 0x6e6bbf, 0x1, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x4, 0x3, 0x1, 0xffff, 0x3, 0xfff}}, 0xe8) ioctl$UI_DEV_DESTROY(r8, 0x5502) 02:18:53 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x80010001fffffffc) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='vfat\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000cc0)={0x0, 0xfb, 0x1015, 0x5, 0xb998, "9200e3841b19b79da5ab04778ceb40b4", "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"}, 0x1015, 0x3) 02:18:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) init_module(&(0x7f0000000000)='eth1\x00', 0x5, &(0x7f0000000080)=')&%vboxnet0eth0(\'mime_type%lo&K&em1self\'user]selinux)vboxnet0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000001c0)={0x11, 0x0, &(0x7f0000000140)}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000680)={[{0xfffffffffffffffa, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, 0xf17, 0x1}, {0x8, 0x8, 0x9, 0xe66, 0x10001, 0x400, 0x2, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffb, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff400, 0x8cde, 0x0, 0x1, 0x6, 0x6}], 0x67}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)="4cbc5c811fec5e158176494d8adefaccada213786ce69c2200fe432dff8469b70addc2a0a35500cde337f6807263e4d0be4c9c33688ff1a6f1477f554ba45a92ee10d9378072218e2e2b3ecb06845de444ba3ff15c4c9775f160a8d99e4a96028fc684333a23c90fe8a752c4dc5b534c6a2f463e3c52bacc3618956794d37b") ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$dmmidi(0x0, 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, 0x0) 02:18:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 160.016188][ T8076] input: syz0 as /devices/virtual/input/input9 02:18:53 executing program 1: r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, r0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8080, 0x0) 02:18:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x80011, r0, 0x0) getcwd(&(0x7f0000000100)=""/134, 0x86) 02:18:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x436e, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)={0x0, @aes128, 0x2, "3ec0a58ca2632511"}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) vmsplice(r1, &(0x7f0000001440)=[{&(0x7f0000000240)="17ba29307a72e7f29184ed52af05fabee121ef0245757af6a9bac544900b6cc5b2ce4af7be8939d769", 0x29}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="beffc39f6b41a9280deba42cb88849cbbf173d60dc1c897b5ba4697c09ae7c5b10a4b7998b64ef772749d34cdd78cc3e148d5b57e80b87dc458671cd2524c231756e76a1fee3c08d92a304042109d1c887d8ebfb58e14f957ca3934710d22c5be9f7586078653d6e65f0da35b035fbacd645f619d44444eea37b1b760696ba9c1c6858a3434c476faba10e63cbe87e9eadc0184e45773fbc9e26c9226bb1f75fefff6c15d0e3d54af62c3c48e3e76da440addd3042994a3c68d06e57f27b9b264229ae919f050e436f337f0393ead81770b9c86be7b248e6cdb219f2185c734a426ad623b35271a812ffe35213d94663aefa8f71d392cad6d1", 0xf9}, {&(0x7f0000001380)="70db34a92adf09b7d689917d9cbb9bd06cc12c08e8a80eb63e666d2d593261d34555a79125aa87fb080f70b04094610a3d350f22ac74090d679d93ba8da7c026eef69435791ec529c802e41e03ac58659113713cbc0ea62156fd0b4c3a7cca3667b55ed161a69543e7bb05d6cde5190e1ed8b111f24bc4c9a8bf78adc869ead799d442df242c824241fddf0f7f", 0x8d}], 0x4, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x8000000000104e24, @loopback}, {0x2, 0x4e21, @dev}, {}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, 0xfffffffffffffffd, 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000100)=0x4) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) 02:18:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f00000001c0)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8001) r1 = dup2(r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000009000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r2, &(0x7f00000010c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x366, &(0x7f0000001080)=[{&(0x7f0000001000)=""/121, 0x7ffff000}], 0x6f, 0x0) 02:18:53 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev, 0x0}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r7, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0)=0x0, &(0x7f0000001300), &(0x7f0000001200)) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev={0xfe, 0x80, [], 0x26}, @in6=@mcast1, 0x4e20, 0x1000000000000000, 0x4e22, 0x4d5, 0xa, 0xa0, 0x20, 0x5e, r6, r9}, {0x5, 0x4, 0x7f, 0x3, 0x3, 0x0, 0xffff, 0xd86}, {0x0, 0xdee, 0x1000, 0x2}, 0x4d, 0x6e6bbf, 0x1, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x4, 0x3, 0x1, 0xffff, 0x3, 0xfff}}, 0xe8) ioctl$UI_DEV_DESTROY(r8, 0x5502) 02:18:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x40000) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x800) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2000, 0x0) getpgid(0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x1ff, 0xe307, 0xffffffff80000000}) 02:18:53 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x7f, {{0xa, 0x4e21, 0x2b5, @remote, 0x9}}}, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x9ca, r3, 0x0, 0xffff}) 02:18:53 executing program 0: ioprio_set$uid(0x3, 0x0, 0x800) 02:18:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 160.473853][ T8115] ptrace attach of "/root/syz-executor.5"[7878] was attempted by "/root/syz-executor.5"[8115] [ 160.502860][ T8109] input: syz0 as /devices/virtual/input/input10 02:18:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x109, "d8304d76ce91f053b1d605b3348c24d3c7ba0c032fb303c79997ce7e76f68293", 0x62, 0x800, 0x9, 0xfffffffffffffff9, 0x3, 0x3, 0x81, 0x3, [0x63, 0xfffffffffffffff7, 0x8, 0x1]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x9e, 0x0, 0x40000001], [0xc1]}) 02:18:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x4104) [ 160.620140][ T8115] ptrace attach of "/root/syz-executor.5"[7878] was attempted by "/root/syz-executor.5"[8115] 02:18:54 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0), &(0x7f0000001300), &(0x7f0000001200)) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5916, 0x82800) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x3, 0xd13}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)="2badaf3beb3f175b0828a672368002e42e99552d837549cbf66c24595be8810d2e883440fa54f9683e587c912926327acb29e36e5457671db161ec9b91799f6a7d8c", 0x42}], 0x1}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x8, [0xf0, 0x6, 0x5, 0x3, 0x80000001, 0xc000000000000000, 0xc5b, 0xdd41]}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r3, 0x1f}, 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000030, 0x0) dup3(r4, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) 02:18:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f00000001c0)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8001) r1 = dup2(r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000009000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r2, &(0x7f00000010c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x366, &(0x7f0000001080)=[{&(0x7f0000001000)=""/121, 0x7ffff000}], 0x6f, 0x0) 02:18:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x2, 0x63, 0x800, 0x7}}) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r2, &(0x7f0000000000)="deb66d6800e96f7d1f8600df3aec0ff8", 0x10, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) [ 160.808620][ T8141] kvm [8136]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 02:18:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 160.885989][ T8150] input: syz0 as /devices/virtual/input/input11 [ 160.914523][ T8152] ptrace attach of "/root/syz-executor.5"[7878] was attempted by "/root/syz-executor.5"[8152] [ 160.936572][ T8162] kvm [8136]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 02:18:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008110e00f80ecdb4cb9d902631912080010013b000000120003000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) 02:18:54 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0), &(0x7f0000001300), &(0x7f0000001200)) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="000000000300000000007f7f000000950000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) [ 161.129223][ T8173] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 02:18:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 161.265317][ T8173] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 161.292153][ T8183] input: syz0 as /devices/virtual/input/input13 [ 161.304311][ T8182] input: syz0 as /devices/virtual/input/input12 02:18:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) io_destroy(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) keyctl$revoke(0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x10000, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback, 0x8000}, 0x1c) r3 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 02:18:54 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getresuid(&(0x7f00000010c0), &(0x7f0000001300), &(0x7f0000001200)) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 161.609172][ T8208] input: syz0 as /devices/virtual/input/input14 02:18:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 161.662499][ T8209] input: syz0 as /devices/virtual/input/input15 02:18:55 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x7, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000280)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x1, 0x40, 0x200000000000002}], 0xfe07) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000001c0)={@empty, r4}, 0x14) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x200000, 0x0) [ 161.879329][ T8222] input: syz0 as /devices/virtual/input/input16 02:18:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x80000000002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000280)={0x0, "e55caef7477dd6426ca412555990647e2a3419f0ae683213412eb806bb88d163", 0x3, 0xfffffffffffffff8}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x280) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000080)) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0xb36) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x82, 0x0) dup2(r0, r0) 02:18:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x30, 0x30, 0xa, 0x8, 0x3, 0x2, 0x5, 0x47, 0xffffffffffffffff}) 02:18:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000100)=""/47, 0x10000021b) socket$isdn(0x22, 0x3, 0x11) 02:18:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:55 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000340)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0385720, &(0x7f0000000140)) 02:18:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000000, 0x11, r0, 0x0) [ 162.133792][ T8249] input: syz0 as /devices/virtual/input/input17 [ 162.211953][ T8249] input: syz0 as /devices/virtual/input/input18 02:18:55 executing program 4: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 162.303859][ T8260] input: syz0 as /devices/virtual/input/input19 02:18:55 executing program 1: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)='selinux\x00'}, 0x30) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x60) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffffffd04d}, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd98}, 0xffff, [0x7, 0xffffffff, 0xe00000, 0x7ff, 0x7, 0x200, 0x8, 0x3]}, 0x5c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000400)={0x7, 0x2, 0xa19e, 0x8}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$user(&(0x7f0000001a00)='user\x00', &(0x7f0000001a40)={'syz', 0x1}, &(0x7f0000001a80)="4b8036a51252f36da5499216c0cd284549af2d02020e9944abfda98b4b1f2c9506694155aa5ac081ed7544b5af911a98088a3652c89af917f7194eb612624cafeca74a9b907eee90bac38bfa9a9332d91f87894baa30bc560fa4bad557f7c1b60b6f32894edda9dcb789bf9e03fe27cc77f86dadc59dfef2afb17602d07aa04b9b8eda185cae36ec", 0x88, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000001c40)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001cc0)=0xc) keyctl$chown(0x4, r4, r5, r6) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r4, 0x200, 0x6}, 0x0, &(0x7f0000000040)="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", &(0x7f0000000500)=""/4096) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0x8, 0xc, 0x3}) 02:18:55 executing program 2: migrate_pages(0x0, 0x2, &(0x7f0000000000)=0x101, &(0x7f0000000080)=0x101) r0 = getpgid(0xffffffffffffffff) getpid() r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x4, 0x7ff, 0x4, 0x8, 0x0, 0x20, 0x800, 0x8, 0x3fc0000000000000, 0x80000001, 0x7, 0x5, 0x7, 0x7ff, 0x6, 0x101, 0x4, 0x2, 0x4, 0x81, 0x2, 0x8, 0x80, 0x6, 0xfffffffffffffffd, 0x3, 0x800, 0x100000000000000, 0x3ff, 0x200, 0x10000, 0xffffffffffffff01, 0x2, 0x800, 0x9, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x80}, 0x2, 0x3ad, 0x6, 0x5, 0x2, 0x7, 0x3}, r0, 0xb, r1, 0x0) 02:18:55 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40a85323, &(0x7f0000000000)={0x80, 0x0, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) 02:18:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 4: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:55 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:55 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4c0, 0x0) setsockopt(r0, 0x22, 0x9, &(0x7f0000000100)="c65734d77e30f8887503a985cafa07a08929299d76f17c05d98b43d66af071641d001dc5981b372538635833c824401dfb1808d0cdbf4d9173a12432a55ecf33d2fdcf77a043626abe2710bddcde7d34e4bc5114ad48542e27c380098ab52fa91dd7aa", 0x63) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0xffff) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0xfffffffffffffe01, 0x100000000, 0x2000000000f8}) 02:18:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 162.577481][ T8288] input: syz0 as /devices/virtual/input/input20 02:18:55 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) tee(r0, r0, 0x800000000000000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) recvmmsg(r2, &(0x7f0000001d40), 0x3b1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e20, @remote}}) 02:18:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x3a9a43) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'syzkaller0\x00', @remote}) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 02:18:56 executing program 4: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:56 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x5, 0x1, 0x3, 0x81}, {0x4c, 0x5, 0x2, 0x73}, {0xc517, 0x0, 0x0, 0x8d}, {0x2, 0x8f}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x16}]}) 02:18:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:56 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:56 executing program 4: mkdir(0x0, 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:56 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x5, 0x1, 0x3, 0x81}, {0x4c, 0x5, 0x2, 0x73}, {0xc517, 0x0, 0x0, 0x8d}, {0x2, 0x8f}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x16}]}) 02:18:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 163.064342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 163.070873][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:18:56 executing program 4: mkdir(0x0, 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 163.158955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 163.167142][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:18:56 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = semget(0x0, 0x1, 0x200) semctl$GETPID(r1, 0x4, 0xb, &(0x7f00000001c0)=""/9) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0xffffffffffffff3c, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8000, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:18:57 executing program 4: mkdir(0x0, 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1008000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(r0, 0x406, r0) wait4(0x0, 0x0, 0x80000008, 0x0) r1 = gettid() tgkill(r1, r1, 0xf) socket$alg(0x26, 0x5, 0x0) 02:18:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x3a9a43) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'syzkaller0\x00', @remote}) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 02:18:57 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:57 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:57 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x802, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = dup(r2) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x100000000, 0xffff, [], &(0x7f0000000000)=0x6}) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, {0x1f, 0x10001, 0x6, 0x2, 0xc00, 0x8}, 0xfffffffffffffff8}, 0xa) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) 02:18:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 164.184109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 164.190193][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:18:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020d0000100000000300000000000000030006000020000002000000e000000100000000000000000800120000000200000000000003407c3eb6d1671c000000000000000000000000000000000000000004000000000000001414bb000000000000000000000000030005000000000002000000dba2f71fd637ff75f9d3e1ea066c55e00000010000000000000000"], 0x80}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r2, &(0x7f0000000180)=""/109}) 02:18:57 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) [ 164.344133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 164.351504][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 164.505011][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 164.511716][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:18:58 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x200000, 0x0) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) ioctl$PPPIOCSMRU1(r0, 0x4004743c, 0x0) [ 164.714488][ T8415] syz-executor.5 (8415) used obsolete PPPIOCDETACH ioctl 02:18:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x3a9a43) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'syzkaller0\x00', @remote}) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 02:18:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) 02:18:58 executing program 2: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0xc02b, 0x2}) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local, @broadcast, [], {@can={0xc, {{0x3, 0x4, 0x2, 0x9}, 0x1, 0x2, 0x0, 0x0, "c8ea6452dcba3830"}}}}, 0x0) 02:18:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x46}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 02:18:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/raw\x00') setsockopt$inet_dccp_buf(r0, 0x21, 0xce, &(0x7f0000000000)="9dcd3689e1e71502ad50af2c32764b747617704fd2b2ac5e5f8f30e8c0eb339300e622ea2e2dbf1ae98c97589bc2e8542cf6ca4cf49725a10a34c07f8364cfd6a6163d", 0x43) preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0x10400003) 02:18:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) 02:18:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 02:18:58 executing program 1: r0 = socket$inet(0x2, 0x2000000080002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x80) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=@newspdinfo={0x1b8, 0x24, 0xe08, 0x70bd29, 0x25dfdbfb, 0x3e, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4}, 0x0, @in=@rand_addr=0x8001, 0x3501, 0x2, 0x3, 0x400, 0x7, 0xddfd, 0xde4b}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x3500, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x100, 0x80000001}, {{@in=@remote, 0x4d4, 0x7f}, 0x0, @in6=@local, 0x3504, 0x4, 0x0, 0x9, 0x7, 0x9}, {{@in=@loopback, 0x4d3, 0x32}, 0xa, @in=@local, 0x0, 0x0, 0x1, 0x5, 0x0, 0x432, 0x3}, {{@in=@broadcast, 0x4d5}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x3506, 0x7, 0x3, 0x5, 0x1, 0x1}, {{@in=@multicast1, 0x4d6, 0x7f}, 0x0, @in6=@ipv4={[], [], @broadcast}, 0x3504, 0x7, 0x1, 0x4, 0x7046cfc9, 0x8001, 0x7}]}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd2c, 0x70bd2d, 0x70bd2b, 0x1, [0x401]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000080}, 0x8004) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x250) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x2, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', 's\x01\x000\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xb0, 0xb0, 0xe8, [@devgroup={'devgroup\x00', 0x18}]}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f0) 02:18:58 executing program 0: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c12a41d88b070") shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x2}) 02:18:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:58 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x80000000) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) dup(r1) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 02:18:58 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 02:18:59 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:18:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x7fffffff, 0x10}, 0xc) 02:18:59 executing program 0: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:59 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000001380)=0x4000000000009) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r6, &(0x7f00000000c0), 0x1000) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) write(r0, &(0x7f0000000080)="130000001a0025f00485bc21fef7001c0a0b49", 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 02:18:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:59 executing program 0: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:59 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:18:59 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r5, &(0x7f00000000c0), 0x1000) sendmsg(r2, &(0x7f0000001640)={&(0x7f0000001100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ofb(aes-arm64),digest_null-generic)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001440)="8f8dc3ffd6b3122c7d5ee930ca5f2d8a74d2f21bd7ff3006863376c1f453b48bdbffd0d0c06123de2199d4bdf59ea08d27", 0x31}], 0x1}, 0x4000000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) 02:18:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 166.279283][ T8513] input: syz0 as /devices/virtual/input/input29 02:18:59 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x80000000) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) dup(r1) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 02:18:59 executing program 0: mkdir(0x0, 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x5, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x7f, 0x9}, @window={0x3, 0x800}, @mss={0x2, 0x1}, @window={0x3, 0x101, 0xfff}, @sack_perm, @timestamp, @mss={0x2, 0xff}], 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x97cb06ebee444840, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r2, &(0x7f00000005c0)="03", 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)="762e9b705022bc9483dc879951f1ebcd3c24c3e3e5f4a794a9cfa1b8ffe48d265a3a702c289e8d1a73581f6882b7e6554718f461086079d76db4514a5bd465791b5631ea6c6daf5c1f2378fd1ccb953d7ca309b47fe1f1ac7466f666e937a6997446cd1e0e768a28415c78937ba2854392fc14072279", 0x76, 0x40000, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 02:18:59 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:18:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:18:59 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r5, &(0x7f00000000c0), 0x1000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) 02:19:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:00 executing program 0: mkdir(0x0, 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 166.635457][ T8536] input: syz0 as /devices/virtual/input/input30 02:19:00 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:00 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x3fffff, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/197) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8982, &(0x7f0000000040)) 02:19:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:00 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) read$FUSE(r5, &(0x7f00000000c0), 0x1000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) [ 167.037527][ T8567] input: syz0 as /devices/virtual/input/input31 02:19:00 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000580)={0x6, 0x0, [], {0x0, @reserved}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1ac, r2, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x333656a7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r3 = syz_open_procfs(r0, &(0x7f0000000140)='\xee\x1c\a{\r\x0e.:\xee^\x1e}\a\xeb\xfd\'\xd7\xc4\xabj\x9d-\xb3\a\xc5&\xd3D\x99pigs\x82O\xda\r\xebe\rE\v\xceHNq ^G\x91&\xc5\xc8\xeb\aG.\x86\x90\xd9A\rJ\xf6s.\xe3\x19\xc4\xdb\xc1\xd1\xad\xfa\x84F\x99\xc8\xd1\x84\x1a~\xa0\x02&\t\x00\x1a\xa1\x13MN<\x80\xebZ \xe4D\xdf\xe4\xaad\xa9\xfc\xcc\xb4\x7fdT*\xbb\xf6\xf8\xc8\xe9\xe2\x05\xf3\x13\xa5\xc5\xa8G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xd9n\xcc\xe1(\x80\xa0\xeb\xb1}\xe6\xae\xd3v\xb3l\a\xb7\xa5\xbb\xec\x15\x1a\xf9\v\xcb(`\x03\xdb\xec\xe3\xdf<\xb4\xc3\xd2\xde\xb8Qs1Q\'\xd8\tM\x1dh\xb21J\x1c$\xa08\xcb\xdf\xba-\x87\x15\x14\xe7\r5Z\\\xec\xfe\x97dsJ\x04\xaaa\xbb )\x8b\x06\x96\xc6\r>7\xb1\f\xa8\xaa\xec[Wu\xec!\xf3Q\xc9\xd8\xf2\xa4{K\xa1\xfb\xf3Nv3\a\xc0\xbdl\xd2%XMh\x83\f\x98\x98\xb4\xf0\xd0\xa2\xb5\xf8^J\xae\x12\x80\xa4J\x10^4\xf5\x10\x90.\xd5\xda\x0e/;\xf5t \x9b\x06\xda\xa3\xda\x7fI;\x89\x0f\x9c\xe8.$mJ\xe7\xa0cZ\x16\xcaC\x13\xb0`\x14aL$\x10W\xe8\v$\xb7y\xb3\x19\x87\xf2\xcfs\xf0\xea\n\x19\xc0ixL\x10x7\xa9\xa3C\a\x99\x86x\xc3\xf5\xd5\xdcn*\xb1\xdf\xd5\xa4\xb8') read$FUSE(r3, &(0x7f0000002180), 0x1000) syz_open_pts(r3, 0x0) 02:19:00 executing program 0: mkdir(0x0, 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0xbcd, 0x8000) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:19:00 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, 0x0, 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:00 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, 0x0, 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:00 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 167.364253][ T8580] input: syz0 as /devices/virtual/input/input32 02:19:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:00 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0x991c, 0xc6, 0x1, 0x9, 0x41, 0xeef, 0x4, {r3, @in={{0x2, 0x4e22, @remote}}, 0x4, 0x2, 0x3, 0x7, 0x2}}, &(0x7f0000000240)=0xb0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x4008000009) 02:19:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, 0x0, 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:01 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 167.642237][ T8600] input: syz0 as /devices/virtual/input/input33 [ 167.935421][ T8624] FS-Cache: Duplicate cookie detected [ 167.940939][ T8624] FS-Cache: O-cookie c=0000000016eb4660 [p=000000007a017e72 fl=212 nc=0 na=0] [ 167.949911][ T8624] FS-Cache: O-cookie d= (null) n= (null) [ 167.957195][ T8624] FS-Cache: O-key=[10] '0200020000a07f000008' [ 167.963323][ T8624] FS-Cache: N-cookie c=00000000195a81b7 [p=000000007a017e72 fl=2 nc=0 na=1] [ 167.972060][ T8624] FS-Cache: N-cookie d=000000004a6f04c2 n=00000000f21ff1db [ 167.979348][ T8624] FS-Cache: N-key=[10] '0200020000a07f000008' 02:19:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0xbcd, 0x8000) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:19:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) fcntl$setstatus(r0, 0x4, 0x400) 02:19:01 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:01 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) [ 167.989205][ T8582] syz-executor.1 (8582) used greatest stack depth: 22920 bytes left [ 168.031934][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:19:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:01 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 168.089951][ T8633] input: syz0 as /devices/virtual/input/input34 [ 168.092584][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:19:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x800, 0x0) mmap(&(0x7f0000c0b000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000002c0)=""/4096) mremap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x3000, 0x0, &(0x7f0000ba7000/0x3000)=nil) mlock(&(0x7f0000d83000/0x1000)=nil, 0x1000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x0, {0x0, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0xb, @sdr={0x59455247, 0x100000001}}) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000240)) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000001c0)={0xfffffffffffffff9, 0x7, 0x5, 0x401, "dce5efd4fce342f88d44e7c21c8489930b4dd321bd8fd4cfd0feb340e885020e"}) 02:19:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:01 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) [ 168.431288][ T8663] input: syz0 as /devices/virtual/input/input35 02:19:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0xbcd, 0x8000) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:19:02 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r4 = accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r5, 0x2e}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x18) ioctl$int_out(r4, 0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:02 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 168.905721][ T8644] syz-executor.1 (8644) used greatest stack depth: 22088 bytes left 02:19:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 168.980087][ T8677] input: syz0 as /devices/virtual/input/input36 02:19:02 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:02 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001180)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 169.277430][ T8699] input: syz0 as /devices/virtual/input/input37 [ 169.304148][ C1] net_ratelimit: 8 callbacks suppressed [ 169.304156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 169.310111][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:19:02 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 169.384123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 169.390003][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:02 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r4 = accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r5, 0x2e}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x18) ioctl$int_out(r4, 0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:03 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) listxattr(&(0x7f0000001680)='./file0\x00', &(0x7f0000001240)=""/71, 0xfffffffffffffeda) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:03 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:03 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:03 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 169.893497][ T8732] input: syz0 as /devices/virtual/input/input38 02:19:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:03 executing program 2: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:03 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:03 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) setxattr$security_selinux(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000017c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) [ 170.171735][ T8755] input: syz0 as /devices/virtual/input/input39 [ 170.425504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 170.431318][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 170.584147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 170.590007][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:04 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r4 = accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r5, 0x2e}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x18) ioctl$int_out(r4, 0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:04 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:04 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:04 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000012c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:04 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 170.777228][ T8768] input: syz0 as /devices/virtual/input/input40 02:19:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:04 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:04 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:04 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) [ 170.984125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 170.989945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 171.069863][ T8790] input: syz0 as /devices/virtual/input/input41 02:19:05 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r4 = accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r5, 0x2e}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x18) ioctl$int_out(r4, 0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, 0x0, 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) 02:19:05 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:05 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:05 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 02:19:05 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:05 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 171.767290][ T8803] input: syz0 as /devices/virtual/input/input42 02:19:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) 02:19:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, 0x0, 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:05 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:05 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="b4000000000000009c000000000000000500000000000000950000e6f6ffffff3adad2f36758283e83ffb409996684b3b30ad651d9a3a8af2d3efb88dd6fff0bdf1d661d754f2afa8aa5bfb8c7e9836fa36f757a2e7f08895ac7041c71ac0529be00fa5bd87fcf6dec9baf555b5a636ee0750000000000000007f9a6f9aa7ed260ff58ba34c304eb06999546fdc3f9928ec358c200966c4603fc2c948ab2e52fc68d5cbf940ebebc8290316d2f5207ec371b930d9f80d1a82dd95495c27bb02ae0f7b12e9f984ba86ac86bf11f2721165beef20a21c25269109da46494f67ddb279d65c6abc86f83b0650d21a4a7c4dde2f37c0a2afeab6f1e0d85808a533e92c094f594bc31ff55b9a13b5264b89531f3ed1879a861796fd4e1fc06d36aca8684e975a1e10a5fa8319803414c51cf6b3b429ab9e305"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) [ 172.068389][ T8829] input: syz0 as /devices/virtual/input/input43 02:19:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r4 = accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r5, 0x2e}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x18) ioctl$int_out(r4, 0x2, &(0x7f00000001c0)) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:06 executing program 1: socketpair$unix(0x1, 0x80000000009, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:06 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) 02:19:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, 0x0, 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:06 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001380)=0x4000000000009) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) 02:19:06 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 172.725235][ T8838] input: syz0 as /devices/virtual/input/input44 02:19:06 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:06 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) 02:19:06 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 172.985251][ T8864] input: syz0 as /devices/virtual/input/input45 02:19:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:06 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:06 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r4, 0x2e}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:06 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 02:19:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:07 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 173.683791][ T8875] input: syz0 as /devices/virtual/input/input46 02:19:07 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:07 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 02:19:07 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:07 executing program 4 (fault-call:5 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:07 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) getpid() process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:07 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) getpid() process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 174.032828][ T8902] input: syz0 as /devices/virtual/input/input47 [ 174.058122][ T8908] FAULT_INJECTION: forcing a failure. [ 174.058122][ T8908] name failslab, interval 1, probability 0, space 0, times 1 [ 174.123396][ T8908] CPU: 0 PID: 8908 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #58 [ 174.131334][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.131341][ T8908] Call Trace: [ 174.131369][ T8908] dump_stack+0x172/0x1f0 [ 174.131395][ T8908] should_fail.cold+0xa/0x15 [ 174.153652][ T8908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 174.159473][ T8908] ? ___might_sleep+0x163/0x280 [ 174.159494][ T8908] __should_failslab+0x121/0x190 [ 174.159513][ T8908] should_failslab+0x9/0x14 [ 174.173810][ T8908] __kmalloc+0x2dc/0x740 [ 174.178082][ T8908] ? _kstrtoull+0x14c/0x200 [ 174.182606][ T8908] ? _parse_integer+0x190/0x190 [ 174.187503][ T8908] ? rw_copy_check_uvector+0x28c/0x330 [ 174.192972][ T8908] rw_copy_check_uvector+0x28c/0x330 [ 174.198291][ T8908] import_iovec+0xbf/0x200 [ 174.202721][ T8908] ? dup_iter+0x260/0x260 [ 174.207140][ T8908] ? __fget+0x35a/0x550 [ 174.211334][ T8908] vfs_readv+0xc6/0x160 [ 174.215524][ T8908] ? lock_downgrade+0x880/0x880 [ 174.220740][ T8908] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 174.226915][ T8908] ? kasan_check_read+0x11/0x20 [ 174.231761][ T8908] ? __fget+0x381/0x550 [ 174.235926][ T8908] ? ksys_dup3+0x3e0/0x3e0 [ 174.240340][ T8908] ? wait_for_completion+0x440/0x440 [ 174.245615][ T8908] ? __fget_light+0x1a9/0x230 [ 174.250400][ T8908] do_preadv+0x1c4/0x280 [ 174.254653][ T8908] ? do_readv+0x370/0x370 [ 174.258996][ T8908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 174.264469][ T8908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 174.269956][ T8908] ? do_syscall_64+0x26/0x610 [ 174.274743][ T8908] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.280811][ T8908] ? do_syscall_64+0x26/0x610 [ 174.285488][ T8908] __x64_sys_preadv+0x9a/0xf0 [ 174.290176][ T8908] do_syscall_64+0x103/0x610 [ 174.294780][ T8908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.300676][ T8908] RIP: 0033:0x4582b9 [ 174.304560][ T8908] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.324479][ T8908] RSP: 002b:00007f8ee9e3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 174.332898][ T8908] RAX: ffffffffffffffda RBX: 00007f8ee9e3cc90 RCX: 00000000004582b9 [ 174.340894][ T8908] RDX: 1000000000000237 RSI: 0000000020000480 RDI: 0000000000000004 [ 174.348876][ T8908] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 174.357615][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ee9e3d6d4 [ 174.365699][ T8908] R13: 00000000004c4d80 R14: 00000000004d8a68 R15: 0000000000000005 02:19:07 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, r4, 0x2e}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:07 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) getpid() process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:07 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) getpid() process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:07 executing program 4 (fault-call:5 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:07 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 174.613290][ T8926] FAULT_INJECTION: forcing a failure. [ 174.613290][ T8926] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 174.626529][ T8926] CPU: 0 PID: 8926 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #58 [ 174.634430][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.644516][ T8926] Call Trace: [ 174.647925][ T8926] dump_stack+0x172/0x1f0 [ 174.652289][ T8926] should_fail.cold+0xa/0x15 [ 174.656907][ T8926] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 174.662735][ T8926] ? __lock_acquire+0x548/0x3fb0 [ 174.667689][ T8926] ? is_bpf_text_address+0xac/0x170 [ 174.672924][ T8926] should_fail_alloc_page+0x50/0x60 [ 174.678162][ T8926] __alloc_pages_nodemask+0x1a1/0x7e0 [ 174.683580][ T8926] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 174.689313][ T8926] ? find_held_lock+0x35/0x130 [ 174.694095][ T8926] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 174.699928][ T8926] cache_grow_begin+0x9c/0x860 [ 174.704907][ T8926] ? rw_copy_check_uvector+0x28c/0x330 [ 174.710378][ T8926] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.716654][ T8926] __kmalloc+0x67f/0x740 [ 174.720924][ T8926] ? _kstrtoull+0x14c/0x200 [ 174.725438][ T8926] ? _parse_integer+0x190/0x190 [ 174.730482][ T8926] ? rw_copy_check_uvector+0x28c/0x330 [ 174.735964][ T8926] rw_copy_check_uvector+0x28c/0x330 [ 174.741273][ T8926] import_iovec+0xbf/0x200 [ 174.745705][ T8926] ? dup_iter+0x260/0x260 [ 174.750050][ T8926] ? __fget+0x35a/0x550 [ 174.754224][ T8926] vfs_readv+0xc6/0x160 [ 174.758394][ T8926] ? lock_downgrade+0x880/0x880 [ 174.763260][ T8926] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 174.769344][ T8926] ? kasan_check_read+0x11/0x20 [ 174.774221][ T8926] ? __fget+0x381/0x550 [ 174.778568][ T8926] ? ksys_dup3+0x3e0/0x3e0 [ 174.783003][ T8926] ? wait_for_completion+0x440/0x440 [ 174.788314][ T8926] ? __fget_light+0x1a9/0x230 [ 174.793003][ T8926] do_preadv+0x1c4/0x280 [ 174.797252][ T8926] ? do_readv+0x370/0x370 [ 174.801609][ T8926] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 174.807092][ T8926] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 174.812567][ T8926] ? do_syscall_64+0x26/0x610 [ 174.817252][ T8926] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.823345][ T8926] ? do_syscall_64+0x26/0x610 [ 174.828040][ T8926] __x64_sys_preadv+0x9a/0xf0 [ 174.832752][ T8926] do_syscall_64+0x103/0x610 [ 174.837359][ T8926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.843282][ T8926] RIP: 0033:0x4582b9 [ 174.847182][ T8926] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.866886][ T8926] RSP: 002b:00007f8ee9e3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 174.875310][ T8926] RAX: ffffffffffffffda RBX: 00007f8ee9e3cc90 RCX: 00000000004582b9 [ 174.883296][ T8926] RDX: 1000000000000237 RSI: 0000000020000480 RDI: 0000000000000004 [ 174.891286][ T8926] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 174.899273][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ee9e3d6d4 02:19:08 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) getpid() process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:08 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) getpid() process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 174.907262][ T8926] R13: 00000000004c4d80 R14: 00000000004d8a68 R15: 0000000000000005 [ 174.934663][ T8929] input: syz0 as /devices/virtual/input/input48 02:19:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:08 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:08 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 175.144101][ C1] net_ratelimit: 12 callbacks suppressed [ 175.144110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 175.156564][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 175.544403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 175.550253][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 175.624149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 175.630039][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:09 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:09 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 4 (fault-call:5 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:09 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 02:19:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 175.837251][ T8952] FAULT_INJECTION: forcing a failure. [ 175.837251][ T8952] name failslab, interval 1, probability 0, space 0, times 0 [ 175.873555][ T8960] input: syz0 as /devices/virtual/input/input49 [ 175.881333][ T8952] CPU: 1 PID: 8952 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #58 [ 175.889243][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.899396][ T8952] Call Trace: [ 175.902712][ T8952] dump_stack+0x172/0x1f0 [ 175.907090][ T8952] should_fail.cold+0xa/0x15 [ 175.911711][ T8952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 175.917532][ T8952] ? ___might_sleep+0x163/0x280 [ 175.922394][ T8952] __should_failslab+0x121/0x190 [ 175.927339][ T8952] should_failslab+0x9/0x14 [ 175.931854][ T8952] kmem_cache_alloc_node_trace+0x270/0x720 [ 175.937864][ T8952] ? fsnotify+0x811/0xbc0 [ 175.942217][ T8952] __kmalloc_node+0x3d/0x70 [ 175.946737][ T8952] kvmalloc_node+0x68/0x100 [ 175.951254][ T8952] seq_read+0x832/0x1130 [ 175.955510][ T8952] ? rw_verify_area+0x118/0x360 [ 175.960390][ T8952] do_iter_read+0x4a9/0x660 [ 175.965076][ T8952] ? dup_iter+0x260/0x260 [ 175.969431][ T8952] vfs_readv+0xf0/0x160 [ 175.973610][ T8952] ? lock_downgrade+0x880/0x880 [ 175.978478][ T8952] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 175.984558][ T8952] ? kasan_check_read+0x11/0x20 [ 175.989592][ T8952] ? ksys_dup3+0x3e0/0x3e0 [ 175.994044][ T8952] ? wait_for_completion+0x440/0x440 [ 175.999359][ T8952] ? __fget_light+0x1a9/0x230 [ 176.004245][ T8952] do_preadv+0x1c4/0x280 [ 176.008511][ T8952] ? do_readv+0x370/0x370 [ 176.012850][ T8952] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 176.018340][ T8952] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 176.023830][ T8952] ? do_syscall_64+0x26/0x610 [ 176.028512][ T8952] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.034587][ T8952] ? do_syscall_64+0x26/0x610 [ 176.039330][ T8952] __x64_sys_preadv+0x9a/0xf0 [ 176.044020][ T8952] do_syscall_64+0x103/0x610 [ 176.049099][ T8952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.055015][ T8952] RIP: 0033:0x4582b9 [ 176.058922][ T8952] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 176.078533][ T8952] RSP: 002b:00007f8ee9e3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 02:19:09 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 176.087209][ T8952] RAX: ffffffffffffffda RBX: 00007f8ee9e3cc90 RCX: 00000000004582b9 [ 176.095221][ T8952] RDX: 1000000000000237 RSI: 0000000020000480 RDI: 0000000000000004 [ 176.103239][ T8952] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 176.111230][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ee9e3d6d4 [ 176.119250][ T8952] R13: 00000000004c4d80 R14: 00000000004d8a68 R15: 0000000000000005 02:19:09 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:09 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) 02:19:09 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:09 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 02:19:09 executing program 4 (fault-call:5 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:10 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {0x0}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 176.621959][ T8990] input: syz0 as /devices/virtual/input/input50 02:19:10 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 02:19:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) 02:19:10 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 02:19:10 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {0x0}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 176.983561][ T9015] input: syz0 as /devices/virtual/input/input51 [ 176.984139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 176.990000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 176.995856][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 177.001581][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:19:10 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:10 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {0x0}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) 02:19:10 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {0x0}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000002, 0x0) 02:19:10 executing program 3: socket(0x10, 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:10 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {0x0}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 177.548724][ T9034] input: syz0 as /devices/virtual/input/input52 02:19:10 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {0x0}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000003, 0x0) 02:19:10 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:11 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:11 executing program 3: socket(0x10, 0x802, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 177.794131][ T9058] input: syz0 as /devices/virtual/input/input53 02:19:11 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:11 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:11 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000004, 0x0) 02:19:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 178.459953][ T9070] input: syz0 as /devices/virtual/input/input54 02:19:11 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:11 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000005, 0x0) 02:19:11 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000006, 0x0) 02:19:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:12 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:12 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:12 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000007, 0x0) 02:19:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:12 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:12 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:12 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:12 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000008, 0x0) 02:19:12 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000009, 0x0) 02:19:13 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000a, 0x0) 02:19:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:13 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:13 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:13 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000b, 0x0) 02:19:13 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {0x0}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000c, 0x0) 02:19:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:13 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {0x0}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:13 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {0x0}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000d, 0x0) [ 180.834111][ C0] net_ratelimit: 16 callbacks suppressed [ 180.834119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 180.845648][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:14 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {0x0}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:14 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {0x0}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000e, 0x0) 02:19:14 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:14 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {0x0}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000f, 0x0) 02:19:14 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:14 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 181.390464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 181.396393][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:19:14 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 181.784125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 181.790014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 181.864108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 181.870029][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:15 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000010, 0x0) 02:19:15 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:15 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:15 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000011, 0x0) 02:19:15 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {0x0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:15 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {0x0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:15 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {0x0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000012, 0x0) [ 182.904159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 182.910031][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:16 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {0x0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:16 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {0x0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000013, 0x0) 02:19:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:16 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:16 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:16 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {0x0}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000014, 0x0) 02:19:16 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:16 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:16 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:16 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 183.269575][ T9345] input: syz0 as /devices/virtual/input/input64 02:19:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000015, 0x0) 02:19:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:16 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 183.417535][ T9356] input: syz0 as /devices/virtual/input/input65 02:19:17 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:17 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:17 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {0x0}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:17 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000016, 0x0) 02:19:17 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 183.900042][ T9375] input: syz0 as /devices/virtual/input/input66 02:19:17 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {0x0}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000017, 0x0) 02:19:17 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:17 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {0x0}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:17 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {0x0}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 184.196682][ T9398] input: syz0 as /devices/virtual/input/input67 02:19:17 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {0x0}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000018, 0x0) 02:19:18 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:18 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {0x0}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000019, 0x0) 02:19:18 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 184.832112][ T9426] input: syz0 as /devices/virtual/input/input68 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001a, 0x0) 02:19:18 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:18 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001b, 0x0) 02:19:18 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 185.285154][ T9460] input: syz0 as /devices/virtual/input/input69 02:19:18 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001c, 0x0) 02:19:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:18 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 185.595761][ T9485] input: syz0 as /devices/virtual/input/input70 [ 185.944110][ C1] net_ratelimit: 16 callbacks suppressed [ 185.944118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 185.955682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 186.024127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 186.030049][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:19 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:19 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001d, 0x0) 02:19:19 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, 0x0, 0x0, 0x0) 02:19:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 02:19:19 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 186.182906][ T9504] input: syz0 as /devices/virtual/input/input71 02:19:19 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, 0x0, 0x0, 0x0) 02:19:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001e, 0x0) 02:19:19 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, 0x0, 0x0, 0x0) 02:19:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 02:19:19 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, 0x0, 0x0, 0x0) 02:19:19 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, 0x0, 0x0, 0x0) [ 186.512266][ T9526] input: syz0 as /devices/virtual/input/input72 02:19:20 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000021, 0x0) 02:19:20 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}], 0x6, 0x0) 02:19:20 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, 0x0, 0x0, 0x0) 02:19:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 186.716012][ T9537] input: syz0 as /devices/virtual/input/input73 02:19:20 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000022, 0x0) 02:19:20 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}], 0x6, 0x0) 02:19:20 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}], 0x6, 0x0) 02:19:20 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:20 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:20 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}], 0x6, 0x0) [ 187.072947][ T9556] input: syz0 as /devices/virtual/input/input74 02:19:20 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}], 0x6, 0x0) [ 187.132831][ T9563] FAULT_INJECTION: forcing a failure. [ 187.132831][ T9563] name failslab, interval 1, probability 0, space 0, times 0 [ 187.155622][ T9563] CPU: 1 PID: 9563 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 187.163579][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.173660][ T9563] Call Trace: [ 187.176970][ T9563] dump_stack+0x172/0x1f0 [ 187.181322][ T9563] should_fail.cold+0xa/0x15 [ 187.185937][ T9563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 187.191773][ T9563] ? ___might_sleep+0x163/0x280 [ 187.196644][ T9563] __should_failslab+0x121/0x190 [ 187.201609][ T9563] should_failslab+0x9/0x14 [ 187.206162][ T9563] __kmalloc_track_caller+0x2d8/0x740 [ 187.213136][ T9563] ? pointer+0xa30/0xa30 [ 187.219061][ T9563] ? __lock_acquire+0x548/0x3fb0 [ 187.224018][ T9563] ? kasprintf+0xbb/0xf0 [ 187.228290][ T9563] kvasprintf+0xc8/0x170 [ 187.232558][ T9563] ? bust_spinlocks+0xe0/0xe0 [ 187.237271][ T9563] ? debug_check_no_obj_freed+0x200/0x464 [ 187.243012][ T9563] kasprintf+0xbb/0xf0 [ 187.247097][ T9563] ? kvasprintf_const+0x190/0x190 [ 187.252156][ T9563] ? input_default_getkeycode+0x520/0x520 [ 187.257913][ T9563] input_devnode+0x4c/0x90 [ 187.262357][ T9563] device_get_devnode+0x175/0x2e0 [ 187.267402][ T9563] ? refcount_sub_and_test_checked+0x154/0x200 [ 187.273616][ T9563] devtmpfs_delete_node+0xaa/0x1a0 [ 187.278758][ T9563] ? devtmpfs_create_node+0x250/0x250 [ 187.284149][ T9563] ? __device_link_free_srcu+0x120/0x120 [ 187.289807][ T9563] ? refcount_dec_and_test_checked+0x1b/0x20 [ 187.295805][ T9563] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.302087][ T9563] ? kobject_put+0x84/0xe0 [ 187.306550][ T9563] ? __device_link_free_srcu+0x120/0x120 [ 187.312210][ T9563] ? klist_children_put+0x4a/0x60 [ 187.317253][ T9563] ? klist_put+0xdc/0x180 [ 187.321646][ T9563] device_del+0x8b4/0xc40 [ 187.326009][ T9563] ? __device_links_no_driver+0x250/0x250 [ 187.331751][ T9563] ? mark_held_locks+0xa4/0xf0 [ 187.336575][ T9563] ? _raw_spin_unlock_irq+0x28/0x90 [ 187.341793][ T9563] ? __input_unregister_device+0x153/0x4a0 [ 187.347621][ T9563] ? _raw_spin_unlock_irq+0x28/0x90 [ 187.353739][ T9563] cdev_device_del+0x1a/0x80 [ 187.358383][ T9563] evdev_disconnect+0x42/0xb0 [ 187.363088][ T9563] __input_unregister_device+0x200/0x4a0 [ 187.368779][ T9563] input_unregister_device+0xc5/0x110 [ 187.374431][ T9563] uinput_destroy_device+0x1f4/0x250 [ 187.379793][ T9563] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 187.384173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 187.385705][ T9563] ? tomoyo_domain+0xc5/0x160 [ 187.391490][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 187.396113][ T9563] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 187.396131][ T9563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.396143][ T9563] ? tomoyo_path_number_perm+0x263/0x520 [ 187.396157][ T9563] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 187.396179][ T9563] ? __fget+0x35a/0x550 [ 187.396196][ T9563] uinput_ioctl+0x4a/0x60 [ 187.396223][ T9563] ? uinput_compat_ioctl+0x90/0x90 [ 187.439443][ T9563] do_vfs_ioctl+0xd6e/0x1390 [ 187.444049][ T9563] ? ioctl_preallocate+0x210/0x210 [ 187.449895][ T9563] ? __fget+0x381/0x550 [ 187.454069][ T9563] ? ksys_dup3+0x3e0/0x3e0 [ 187.458514][ T9563] ? tomoyo_file_ioctl+0x23/0x30 [ 187.463474][ T9563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.469904][ T9563] ? security_file_ioctl+0x93/0xc0 [ 187.475256][ T9563] ksys_ioctl+0xab/0xd0 [ 187.479805][ T9563] __x64_sys_ioctl+0x73/0xb0 [ 187.484799][ T9563] do_syscall_64+0x103/0x610 [ 187.489516][ T9563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 187.496048][ T9563] RIP: 0033:0x4582b9 [ 187.500042][ T9563] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.520148][ T9563] RSP: 002b:00007fee765a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.528706][ T9563] RAX: ffffffffffffffda RBX: 00007fee765a8c90 RCX: 00000000004582b9 [ 187.537091][ T9563] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 187.545077][ T9563] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 187.553063][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765a96d4 [ 187.561049][ T9563] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 [ 187.569294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 187.575334][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:19:21 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}], 0x6, 0x0) 02:19:21 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000023, 0x0) [ 187.624384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 187.630231][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:19:21 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}], 0x7, 0x0) 02:19:21 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:21 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}], 0x7, 0x0) 02:19:21 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}], 0x7, 0x0) 02:19:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000024, 0x0) 02:19:21 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:21 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 187.997761][ T9596] input: syz0 as /devices/virtual/input/input75 02:19:21 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}], 0x7, 0x0) [ 188.053057][ T9596] FAULT_INJECTION: forcing a failure. [ 188.053057][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 188.079985][ T9596] CPU: 1 PID: 9596 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 188.087925][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.097995][ T9596] Call Trace: [ 188.101315][ T9596] dump_stack+0x172/0x1f0 [ 188.105690][ T9596] should_fail.cold+0xa/0x15 [ 188.110321][ T9596] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 188.116159][ T9596] ? ___might_sleep+0x163/0x280 [ 188.121041][ T9596] __should_failslab+0x121/0x190 [ 188.126007][ T9596] should_failslab+0x9/0x14 [ 188.130542][ T9596] kmem_cache_alloc_trace+0x2d1/0x760 [ 188.135952][ T9596] ? mutex_trylock+0x1e0/0x1e0 [ 188.140738][ T9596] ? kasan_check_write+0x14/0x20 [ 188.145703][ T9596] kobject_uevent_env+0x2fb/0x1030 [ 188.150841][ T9596] ? wait_for_completion+0x440/0x440 [ 188.156174][ T9596] kobject_uevent+0x20/0x26 [ 188.160706][ T9596] device_del+0x758/0xc40 [ 188.165116][ T9596] ? __device_links_no_driver+0x250/0x250 [ 188.170882][ T9596] ? _raw_spin_unlock_irq+0x28/0x90 [ 188.176106][ T9596] ? __input_unregister_device+0x153/0x4a0 [ 188.182025][ T9596] ? _raw_spin_unlock_irq+0x28/0x90 [ 188.187252][ T9596] cdev_device_del+0x1a/0x80 [ 188.192394][ T9596] evdev_disconnect+0x42/0xb0 [ 188.197099][ T9596] __input_unregister_device+0x200/0x4a0 [ 188.202763][ T9596] input_unregister_device+0xc5/0x110 [ 188.208188][ T9596] uinput_destroy_device+0x1f4/0x250 [ 188.213514][ T9596] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 188.219441][ T9596] ? tomoyo_domain+0xc5/0x160 [ 188.224152][ T9596] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 188.230248][ T9596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.236586][ T9596] ? tomoyo_path_number_perm+0x263/0x520 [ 188.242253][ T9596] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 188.248087][ T9596] ? __fget+0x35a/0x550 02:19:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000025, 0x0) 02:19:21 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}], 0x7, 0x0) [ 188.252270][ T9596] uinput_ioctl+0x4a/0x60 [ 188.256627][ T9596] ? uinput_compat_ioctl+0x90/0x90 [ 188.261773][ T9596] do_vfs_ioctl+0xd6e/0x1390 [ 188.266385][ T9596] ? ioctl_preallocate+0x210/0x210 [ 188.271548][ T9596] ? __fget+0x381/0x550 [ 188.275739][ T9596] ? ksys_dup3+0x3e0/0x3e0 [ 188.280178][ T9596] ? tomoyo_file_ioctl+0x23/0x30 [ 188.285134][ T9596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.291388][ T9596] ? security_file_ioctl+0x93/0xc0 [ 188.296537][ T9596] ksys_ioctl+0xab/0xd0 [ 188.296558][ T9596] __x64_sys_ioctl+0x73/0xb0 [ 188.296585][ T9596] do_syscall_64+0x103/0x610 [ 188.296606][ T9596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.296618][ T9596] RIP: 0033:0x4582b9 [ 188.296632][ T9596] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.296640][ T9596] RSP: 002b:00007fee765c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:19:21 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:21 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {0x0}], 0x7, 0x0) 02:19:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000026, 0x0) [ 188.296653][ T9596] RAX: ffffffffffffffda RBX: 00007fee765c9c90 RCX: 00000000004582b9 [ 188.296661][ T9596] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 188.296668][ T9596] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 188.296675][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765ca6d4 [ 188.296683][ T9596] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 02:19:22 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:22 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:22 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:22 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000027, 0x0) 02:19:22 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:22 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:22 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 188.901800][ T9632] input: syz0 as /devices/virtual/input/input76 [ 188.938792][ T9632] FAULT_INJECTION: forcing a failure. [ 188.938792][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 189.007837][ T9632] CPU: 1 PID: 9632 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 189.015785][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.025953][ T9632] Call Trace: [ 189.029272][ T9632] dump_stack+0x172/0x1f0 [ 189.033638][ T9632] should_fail.cold+0xa/0x15 [ 189.038265][ T9632] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 189.044104][ T9632] ? ___might_sleep+0x163/0x280 [ 189.048987][ T9632] __should_failslab+0x121/0x190 [ 189.053976][ T9632] should_failslab+0x9/0x14 [ 189.058499][ T9632] __kmalloc+0x2dc/0x740 [ 189.062796][ T9632] ? kobject_uevent_env+0x2fb/0x1030 [ 189.068111][ T9632] ? rcu_read_lock_sched_held+0x110/0x130 [ 189.073863][ T9632] ? kobject_get_path+0xc4/0x1b0 [ 189.078842][ T9632] kobject_get_path+0xc4/0x1b0 [ 189.083642][ T9632] kobject_uevent_env+0x31f/0x1030 [ 189.088780][ T9632] ? wait_for_completion+0x440/0x440 [ 189.096365][ T9632] kobject_uevent+0x20/0x26 [ 189.100926][ T9632] device_del+0x758/0xc40 [ 189.105300][ T9632] ? __device_links_no_driver+0x250/0x250 [ 189.111052][ T9632] ? _raw_spin_unlock_irq+0x28/0x90 [ 189.116273][ T9632] ? __input_unregister_device+0x153/0x4a0 [ 189.122112][ T9632] ? _raw_spin_unlock_irq+0x28/0x90 [ 189.127344][ T9632] cdev_device_del+0x1a/0x80 [ 189.131976][ T9632] evdev_disconnect+0x42/0xb0 [ 189.136688][ T9632] __input_unregister_device+0x200/0x4a0 [ 189.142353][ T9632] input_unregister_device+0xc5/0x110 [ 189.147753][ T9632] uinput_destroy_device+0x1f4/0x250 02:19:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000028, 0x0) [ 189.153072][ T9632] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 189.159425][ T9632] ? tomoyo_domain+0xc5/0x160 [ 189.164162][ T9632] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 189.170259][ T9632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.176526][ T9632] ? tomoyo_path_number_perm+0x263/0x520 [ 189.182192][ T9632] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 189.188032][ T9632] ? __fget+0x35a/0x550 [ 189.192208][ T9632] uinput_ioctl+0x4a/0x60 [ 189.196545][ T9632] ? uinput_compat_ioctl+0x90/0x90 [ 189.196571][ T9632] do_vfs_ioctl+0xd6e/0x1390 [ 189.196592][ T9632] ? ioctl_preallocate+0x210/0x210 [ 189.196607][ T9632] ? __fget+0x381/0x550 [ 189.196627][ T9632] ? ksys_dup3+0x3e0/0x3e0 [ 189.206419][ T9632] ? tomoyo_file_ioctl+0x23/0x30 [ 189.206435][ T9632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.206450][ T9632] ? security_file_ioctl+0x93/0xc0 [ 189.206467][ T9632] ksys_ioctl+0xab/0xd0 [ 189.206484][ T9632] __x64_sys_ioctl+0x73/0xb0 [ 189.206507][ T9632] do_syscall_64+0x103/0x610 [ 189.251176][ T9632] entry_SYSCALL_64_after_hwframe+0x49/0xbe 02:19:22 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 189.257082][ T9632] RIP: 0033:0x4582b9 [ 189.260995][ T9632] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 189.280612][ T9632] RSP: 002b:00007fee765c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.280627][ T9632] RAX: ffffffffffffffda RBX: 00007fee765c9c90 RCX: 00000000004582b9 [ 189.280634][ T9632] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 02:19:22 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {0x0}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 189.280641][ T9632] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 189.280648][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765ca6d4 [ 189.280656][ T9632] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 02:19:22 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {0x0}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:23 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000029, 0x0) 02:19:23 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {0x0}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:23 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {0x0}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:23 executing program 3 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:23 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:23 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {0x0}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 189.836059][ T9671] input: syz0 as /devices/virtual/input/input77 [ 189.906565][ T9671] FAULT_INJECTION: forcing a failure. [ 189.906565][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 189.940989][ T9671] CPU: 0 PID: 9671 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 189.948936][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.959012][ T9671] Call Trace: [ 189.962419][ T9671] dump_stack+0x172/0x1f0 [ 189.966906][ T9671] should_fail.cold+0xa/0x15 [ 189.971543][ T9671] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 189.977393][ T9671] ? ___might_sleep+0x163/0x280 [ 189.982274][ T9671] __should_failslab+0x121/0x190 [ 189.987242][ T9671] should_failslab+0x9/0x14 [ 189.991767][ T9671] __kmalloc+0x2dc/0x740 [ 189.996054][ T9671] ? kobject_uevent_env+0x2fb/0x1030 [ 190.001504][ T9671] ? rcu_read_lock_sched_held+0x110/0x130 [ 190.007313][ T9671] ? kobject_get_path+0xc4/0x1b0 [ 190.012365][ T9671] kobject_get_path+0xc4/0x1b0 [ 190.017350][ T9671] kobject_uevent_env+0x31f/0x1030 [ 190.022495][ T9671] ? wait_for_completion+0x440/0x440 [ 190.027844][ T9671] kobject_uevent+0x20/0x26 [ 190.032383][ T9671] device_del+0x758/0xc40 [ 190.036748][ T9671] ? __device_links_no_driver+0x250/0x250 [ 190.042491][ T9671] ? _raw_spin_unlock_irq+0x28/0x90 [ 190.047732][ T9671] ? __input_unregister_device+0x153/0x4a0 02:19:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002a, 0x0) [ 190.053566][ T9671] ? _raw_spin_unlock_irq+0x28/0x90 [ 190.058791][ T9671] cdev_device_del+0x1a/0x80 [ 190.063397][ T9671] evdev_disconnect+0x42/0xb0 [ 190.068105][ T9671] __input_unregister_device+0x200/0x4a0 [ 190.073764][ T9671] input_unregister_device+0xc5/0x110 [ 190.079161][ T9671] uinput_destroy_device+0x1f4/0x250 [ 190.084467][ T9671] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 190.090381][ T9671] ? tomoyo_domain+0xc5/0x160 [ 190.095083][ T9671] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 190.101178][ T9671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 02:19:23 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002b, 0x0) [ 190.107469][ T9671] ? tomoyo_path_number_perm+0x263/0x520 [ 190.113302][ T9671] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 190.119140][ T9671] ? __fget+0x35a/0x550 [ 190.123348][ T9671] uinput_ioctl+0x4a/0x60 [ 190.127691][ T9671] ? uinput_compat_ioctl+0x90/0x90 [ 190.127711][ T9671] do_vfs_ioctl+0xd6e/0x1390 [ 190.127732][ T9671] ? ioctl_preallocate+0x210/0x210 [ 190.137458][ T9671] ? __fget+0x381/0x550 [ 190.137478][ T9671] ? ksys_dup3+0x3e0/0x3e0 [ 190.137498][ T9671] ? tomoyo_file_ioctl+0x23/0x30 [ 190.137512][ T9671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 190.137527][ T9671] ? security_file_ioctl+0x93/0xc0 [ 190.137543][ T9671] ksys_ioctl+0xab/0xd0 [ 190.137562][ T9671] __x64_sys_ioctl+0x73/0xb0 [ 190.137592][ T9671] do_syscall_64+0x103/0x610 [ 190.180905][ T9671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.186863][ T9671] RIP: 0033:0x4582b9 02:19:23 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 190.190778][ T9671] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 190.210678][ T9671] RSP: 002b:00007fee765c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.219424][ T9671] RAX: ffffffffffffffda RBX: 00007fee765c9c90 RCX: 00000000004582b9 [ 190.219434][ T9671] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 190.219441][ T9671] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 190.219448][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765ca6d4 02:19:23 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {0x0}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 190.219455][ T9671] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 02:19:24 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:24 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:24 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002c, 0x0) 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:24 executing program 3 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 190.738116][ T9706] input: syz0 as /devices/virtual/input/input78 [ 190.814669][ T9715] FAULT_INJECTION: forcing a failure. [ 190.814669][ T9715] name failslab, interval 1, probability 0, space 0, times 0 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 190.922986][ T9715] CPU: 0 PID: 9715 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 190.930939][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.941012][ T9715] Call Trace: [ 190.944331][ T9715] dump_stack+0x172/0x1f0 [ 190.948731][ T9715] should_fail.cold+0xa/0x15 [ 190.953356][ T9715] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 190.959209][ T9715] ? ___might_sleep+0x163/0x280 [ 190.964092][ T9715] __should_failslab+0x121/0x190 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 190.969045][ T9715] should_failslab+0x9/0x14 [ 190.973583][ T9715] kmem_cache_alloc_node+0x264/0x710 [ 190.973706][ T9715] ? find_held_lock+0x35/0x130 [ 190.983861][ T9715] __alloc_skb+0xd5/0x5e0 [ 190.983889][ T9715] ? skb_trim+0x190/0x190 [ 190.983909][ T9715] ? kasan_check_read+0x11/0x20 [ 190.983930][ T9715] alloc_uevent_skb+0x83/0x1e2 [ 190.983947][ T9715] kobject_uevent_env+0xa63/0x1030 [ 190.983964][ T9715] ? wait_for_completion+0x440/0x440 [ 190.983985][ T9715] kobject_uevent+0x20/0x26 [ 190.984002][ T9715] device_del+0x758/0xc40 [ 190.984021][ T9715] ? __device_links_no_driver+0x250/0x250 [ 190.984036][ T9715] ? _raw_spin_unlock_irq+0x28/0x90 [ 190.984050][ T9715] ? __input_unregister_device+0x153/0x4a0 [ 190.984061][ T9715] ? _raw_spin_unlock_irq+0x28/0x90 [ 190.984085][ T9715] cdev_device_del+0x1a/0x80 [ 190.984108][ T9715] evdev_disconnect+0x42/0xb0 [ 191.052694][ T9715] __input_unregister_device+0x200/0x4a0 [ 191.058345][ T9715] input_unregister_device+0xc5/0x110 [ 191.063754][ T9715] uinput_destroy_device+0x1f4/0x250 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 191.069079][ T9715] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 191.074992][ T9715] ? tomoyo_domain+0xc5/0x160 [ 191.079701][ T9715] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 191.085800][ T9715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.092056][ T9715] ? tomoyo_path_number_perm+0x263/0x520 [ 191.097740][ T9715] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 191.103574][ T9715] ? __fget+0x35a/0x550 [ 191.107751][ T9715] uinput_ioctl+0x4a/0x60 [ 191.112094][ T9715] ? uinput_compat_ioctl+0x90/0x90 [ 191.117233][ T9715] do_vfs_ioctl+0xd6e/0x1390 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 191.121849][ T9715] ? ioctl_preallocate+0x210/0x210 [ 191.126986][ T9715] ? __fget+0x381/0x550 [ 191.131183][ T9715] ? ksys_dup3+0x3e0/0x3e0 [ 191.135623][ T9715] ? tomoyo_file_ioctl+0x23/0x30 [ 191.140573][ T9715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.146853][ T9715] ? security_file_ioctl+0x93/0xc0 [ 191.152112][ T9715] ksys_ioctl+0xab/0xd0 [ 191.156283][ T9715] __x64_sys_ioctl+0x73/0xb0 [ 191.160909][ T9715] do_syscall_64+0x103/0x610 [ 191.165526][ T9715] entry_SYSCALL_64_after_hwframe+0x49/0xbe 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 191.171434][ T9715] RIP: 0033:0x4582b9 [ 191.175366][ T9715] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.194981][ T9715] RSP: 002b:00007fee765a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.203409][ T9715] RAX: ffffffffffffffda RBX: 00007fee765a8c90 RCX: 00000000004582b9 [ 191.211418][ T9715] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 191.220895][ T9715] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 191.229750][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765a96d4 [ 191.237733][ T9715] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 [ 191.304142][ C0] net_ratelimit: 16 callbacks suppressed [ 191.304150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 191.315806][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:24 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:24 executing program 3 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:24 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:24 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002d, 0x0) 02:19:24 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 191.617760][ T9741] input: syz0 as /devices/virtual/input/input79 02:19:25 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 191.699531][ T9741] FAULT_INJECTION: forcing a failure. [ 191.699531][ T9741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.712781][ T9741] CPU: 1 PID: 9741 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 191.720860][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.731063][ T9741] Call Trace: [ 191.734386][ T9741] dump_stack+0x172/0x1f0 [ 191.734410][ T9741] should_fail.cold+0xa/0x15 [ 191.734430][ T9741] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 191.734450][ T9741] ? __lock_acquire+0x548/0x3fb0 [ 191.734476][ T9741] ? put_dec+0x3b/0xd0 [ 191.743425][ T9741] should_fail_alloc_page+0x50/0x60 [ 191.743441][ T9741] __alloc_pages_nodemask+0x1a1/0x7e0 [ 191.743461][ T9741] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 191.743475][ T9741] ? find_held_lock+0x35/0x130 [ 191.743499][ T9741] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 191.785321][ T9741] cache_grow_begin+0x9c/0x860 [ 191.790112][ T9741] ? __alloc_skb+0xd5/0x5e0 [ 191.794632][ T9741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 191.800907][ T9741] kmem_cache_alloc_node+0x645/0x710 [ 191.806242][ T9741] ? find_held_lock+0x35/0x130 [ 191.811036][ T9741] __alloc_skb+0xd5/0x5e0 [ 191.815386][ T9741] ? skb_trim+0x190/0x190 [ 191.819741][ T9741] ? kasan_check_read+0x11/0x20 [ 191.824624][ T9741] alloc_uevent_skb+0x83/0x1e2 [ 191.829408][ T9741] kobject_uevent_env+0xa63/0x1030 [ 191.834552][ T9741] ? wait_for_completion+0x440/0x440 [ 191.839981][ T9741] kobject_uevent+0x20/0x26 [ 191.844503][ T9741] device_del+0x758/0xc40 [ 191.848853][ T9741] ? __device_links_no_driver+0x250/0x250 [ 191.854609][ T9741] ? _raw_spin_unlock_irq+0x28/0x90 [ 191.859837][ T9741] ? __input_unregister_device+0x153/0x4a0 [ 191.865673][ T9741] ? _raw_spin_unlock_irq+0x28/0x90 [ 191.870910][ T9741] cdev_device_del+0x1a/0x80 [ 191.875721][ T9741] evdev_disconnect+0x42/0xb0 [ 191.880420][ T9741] __input_unregister_device+0x200/0x4a0 [ 191.886105][ T9741] input_unregister_device+0xc5/0x110 [ 191.891508][ T9741] uinput_destroy_device+0x1f4/0x250 [ 191.897018][ T9741] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 191.902927][ T9741] ? tomoyo_domain+0xc5/0x160 [ 191.907738][ T9741] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 191.913831][ T9741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.920106][ T9741] ? tomoyo_path_number_perm+0x263/0x520 [ 191.925769][ T9741] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 191.931616][ T9741] ? __fget+0x35a/0x550 [ 191.935797][ T9741] uinput_ioctl+0x4a/0x60 [ 191.940143][ T9741] ? uinput_compat_ioctl+0x90/0x90 [ 191.945274][ T9741] do_vfs_ioctl+0xd6e/0x1390 02:19:25 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002e, 0x0) 02:19:25 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:25 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:25 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 191.949910][ T9741] ? ioctl_preallocate+0x210/0x210 [ 191.955131][ T9741] ? __fget+0x381/0x550 [ 191.959311][ T9741] ? ksys_dup3+0x3e0/0x3e0 [ 191.963758][ T9741] ? tomoyo_file_ioctl+0x23/0x30 [ 191.968958][ T9741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.975235][ T9741] ? security_file_ioctl+0x93/0xc0 [ 191.980376][ T9741] ksys_ioctl+0xab/0xd0 [ 191.984556][ T9741] __x64_sys_ioctl+0x73/0xb0 [ 191.989205][ T9741] do_syscall_64+0x103/0x610 [ 191.993811][ T9741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 191.999718][ T9741] RIP: 0033:0x4582b9 [ 192.003627][ T9741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.023252][ T9741] RSP: 002b:00007fee765c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.031708][ T9741] RAX: ffffffffffffffda RBX: 00007fee765c9c90 RCX: 00000000004582b9 [ 192.040292][ T9741] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 192.048506][ T9741] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 192.056497][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765ca6d4 [ 192.064486][ T9741] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 [ 192.072753][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 192.078591][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 192.084540][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 192.090329][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 192.184171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 192.190051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 192.264107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 192.270243][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:19:25 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:25 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x100000000000002f, 0x0) 02:19:25 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:25 executing program 3 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:25 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:25 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 192.514715][ T9781] input: syz0 as /devices/virtual/input/input80 02:19:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000030, 0x0) 02:19:25 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 192.596238][ T9781] FAULT_INJECTION: forcing a failure. [ 192.596238][ T9781] name failslab, interval 1, probability 0, space 0, times 0 [ 192.627448][ T9781] CPU: 1 PID: 9781 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 192.635378][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.645446][ T9781] Call Trace: [ 192.648766][ T9781] dump_stack+0x172/0x1f0 [ 192.653154][ T9781] should_fail.cold+0xa/0x15 [ 192.657771][ T9781] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 192.663605][ T9781] ? ___might_sleep+0x163/0x280 [ 192.668489][ T9781] __should_failslab+0x121/0x190 [ 192.673458][ T9781] should_failslab+0x9/0x14 [ 192.678114][ T9781] kmem_cache_alloc_node_trace+0x270/0x720 [ 192.683984][ T9781] __kmalloc_node_track_caller+0x3d/0x70 [ 192.689641][ T9781] __kmalloc_reserve.isra.0+0x40/0xf0 02:19:26 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:26 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {0x0}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 192.695043][ T9781] __alloc_skb+0x10b/0x5e0 [ 192.699483][ T9781] ? skb_trim+0x190/0x190 [ 192.703840][ T9781] ? kasan_check_read+0x11/0x20 [ 192.708813][ T9781] alloc_uevent_skb+0x83/0x1e2 [ 192.713606][ T9781] kobject_uevent_env+0xa63/0x1030 [ 192.718783][ T9781] ? wait_for_completion+0x440/0x440 [ 192.724103][ T9781] kobject_uevent+0x20/0x26 [ 192.728649][ T9781] device_del+0x758/0xc40 [ 192.733188][ T9781] ? __device_links_no_driver+0x250/0x250 [ 192.738926][ T9781] ? _raw_spin_unlock_irq+0x28/0x90 [ 192.744133][ T9781] ? __input_unregister_device+0x153/0x4a0 [ 192.749960][ T9781] ? _raw_spin_unlock_irq+0x28/0x90 [ 192.755181][ T9781] cdev_device_del+0x1a/0x80 [ 192.759791][ T9781] evdev_disconnect+0x42/0xb0 [ 192.764499][ T9781] __input_unregister_device+0x200/0x4a0 [ 192.770196][ T9781] input_unregister_device+0xc5/0x110 [ 192.775598][ T9781] uinput_destroy_device+0x1f4/0x250 [ 192.780916][ T9781] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 192.786829][ T9781] ? tomoyo_domain+0xc5/0x160 [ 192.791531][ T9781] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 192.797799][ T9781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.804141][ T9781] ? tomoyo_path_number_perm+0x263/0x520 [ 192.809797][ T9781] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 192.815630][ T9781] ? __fget+0x35a/0x550 [ 192.819818][ T9781] uinput_ioctl+0x4a/0x60 [ 192.824165][ T9781] ? uinput_compat_ioctl+0x90/0x90 [ 192.829296][ T9781] do_vfs_ioctl+0xd6e/0x1390 [ 192.833916][ T9781] ? ioctl_preallocate+0x210/0x210 [ 192.839050][ T9781] ? __fget+0x381/0x550 [ 192.843214][ T9781] ? ksys_dup3+0x3e0/0x3e0 [ 192.847637][ T9781] ? tomoyo_file_ioctl+0x23/0x30 [ 192.852588][ T9781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.858849][ T9781] ? security_file_ioctl+0x93/0xc0 [ 192.864000][ T9781] ksys_ioctl+0xab/0xd0 [ 192.868178][ T9781] __x64_sys_ioctl+0x73/0xb0 [ 192.872824][ T9781] do_syscall_64+0x103/0x610 [ 192.877444][ T9781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.883352][ T9781] RIP: 0033:0x4582b9 [ 192.887260][ T9781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.906880][ T9781] RSP: 002b:00007fee765c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.915446][ T9781] RAX: ffffffffffffffda RBX: 00007fee765c9c90 RCX: 00000000004582b9 [ 192.923480][ T9781] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 192.931732][ T9781] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 192.939820][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765ca6d4 02:19:26 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {0x0}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 192.947802][ T9781] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 02:19:26 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000080002000700000014000400ff0100000000000009000000d2000000"], 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:26 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:26 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {0x0}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000031, 0x0) 02:19:26 executing program 3 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:19:26 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/123) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xccb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff78}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x100000000, 0x0, 0x0, 0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:19:26 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 193.434988][ T9823] input: syz0 as /devices/virtual/input/input81 02:19:26 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) [ 193.543540][ T9825] FAULT_INJECTION: forcing a failure. [ 193.543540][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 193.608212][ T9825] CPU: 0 PID: 9825 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 193.616158][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.626233][ T9825] Call Trace: [ 193.626265][ T9825] dump_stack+0x172/0x1f0 [ 193.626288][ T9825] should_fail.cold+0xa/0x15 [ 193.626310][ T9825] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 193.633928][ T9825] ? ___might_sleep+0x163/0x280 [ 193.633950][ T9825] __should_failslab+0x121/0x190 [ 193.633965][ T9825] should_failslab+0x9/0x14 [ 193.633988][ T9825] kmem_cache_alloc_trace+0x2d1/0x760 [ 193.654162][ T9825] ? kasan_check_write+0x14/0x20 [ 193.654187][ T9825] kobject_uevent_env+0x2fb/0x1030 [ 193.654209][ T9825] ? wait_for_completion+0x440/0x440 [ 193.664120][ T9825] kobject_uevent+0x20/0x26 [ 193.664141][ T9825] device_del+0x758/0xc40 [ 193.664162][ T9825] ? __device_links_no_driver+0x250/0x250 [ 193.664177][ T9825] ? trace_hardirqs_on+0x67/0x230 [ 193.664200][ T9825] __input_unregister_device+0x3a4/0x4a0 [ 193.664217][ T9825] input_unregister_device+0xc5/0x110 [ 193.664242][ T9825] uinput_destroy_device+0x1f4/0x250 [ 193.715536][ T9825] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 193.721536][ T9825] ? tomoyo_domain+0xc5/0x160 [ 193.726245][ T9825] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 193.732335][ T9825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.738608][ T9825] ? tomoyo_path_number_perm+0x263/0x520 [ 193.744255][ T9825] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 193.750096][ T9825] ? __fget+0x35a/0x550 [ 193.754275][ T9825] uinput_ioctl+0x4a/0x60 [ 193.758653][ T9825] ? uinput_compat_ioctl+0x90/0x90 [ 193.763806][ T9825] do_vfs_ioctl+0xd6e/0x1390 [ 193.768439][ T9825] ? ioctl_preallocate+0x210/0x210 [ 193.773591][ T9825] ? __fget+0x381/0x550 [ 193.777772][ T9825] ? ksys_dup3+0x3e0/0x3e0 [ 193.782211][ T9825] ? tomoyo_file_ioctl+0x23/0x30 [ 193.787184][ T9825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.793442][ T9825] ? security_file_ioctl+0x93/0xc0 [ 193.798578][ T9825] ksys_ioctl+0xab/0xd0 [ 193.802771][ T9825] __x64_sys_ioctl+0x73/0xb0 02:19:27 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x6, 0x0) 02:19:27 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) 02:19:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400000000080c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000032, 0x0) 02:19:27 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) [ 193.807395][ T9825] do_syscall_64+0x103/0x610 [ 193.812012][ T9825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 193.817926][ T9825] RIP: 0033:0x4582b9 [ 193.821852][ T9825] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.842151][ T9825] RSP: 002b:00007fee765a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.850590][ T9825] RAX: ffffffffffffffda RBX: 00007fee765a8c90 RCX: 00000000004582b9 [ 193.850598][ T9825] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 193.850606][ T9825] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 193.850613][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee765a96d4 [ 193.850620][ T9825] R13: 00000000004c2917 R14: 00000000004d5768 R15: 0000000000000005 [ 193.914934][ T9813] ================================================================== [ 193.923278][ T9813] BUG: KASAN: use-after-free in string+0x208/0x230 [ 193.929809][ T9813] Read of size 1 at addr ffff8880a139ff80 by task syz-executor.3/9813 [ 193.937982][ T9813] [ 193.940301][ T9813] CPU: 0 PID: 9813 Comm: syz-executor.3 Not tainted 5.1.0-rc3+ #58 [ 193.948300][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.958356][ T9813] Call Trace: [ 193.961655][ T9813] dump_stack+0x172/0x1f0 [ 193.966130][ T9813] ? string+0x208/0x230 [ 193.970296][ T9813] print_address_description.cold+0x7c/0x20d [ 193.976282][ T9813] ? string+0x208/0x230 [ 193.980439][ T9813] ? string+0x208/0x230 [ 193.984583][ T9813] kasan_report.cold+0x1b/0x40 [ 193.989443][ T9813] ? string+0x208/0x230 [ 193.993593][ T9813] __asan_report_load1_noabort+0x14/0x20 [ 193.999223][ T9813] string+0x208/0x230 [ 194.003206][ T9813] ? widen_string+0x2e0/0x2e0 [ 194.007885][ T9813] ? console_unlock+0x6a7/0xeb0 [ 194.012738][ T9813] ? find_held_lock+0x35/0x130 [ 194.017591][ T9813] vsnprintf+0xbfc/0x1af0 [ 194.021943][ T9813] ? pointer+0xa30/0xa30 [ 194.026192][ T9813] ? string+0x1cc/0x230 [ 194.030334][ T9813] add_uevent_var+0x14d/0x310 [ 194.035006][ T9813] ? cleanup_uevent_env+0x50/0x50 [ 194.040013][ T9813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.046256][ T9813] ? input_dev_uevent+0x110/0x890 [ 194.051276][ T9813] input_dev_uevent+0x163/0x890 [ 194.056134][ T9813] ? input_add_uevent_bm_var+0x150/0x150 [ 194.061752][ T9813] dev_uevent+0x312/0x580 [ 194.066070][ T9813] ? device_get_devnode+0x2e0/0x2e0 [ 194.071289][ T9813] ? kobject_uevent_env+0x2fb/0x1030 [ 194.076574][ T9813] ? rcu_read_lock_sched_held+0x110/0x130 [ 194.082319][ T9813] ? kobject_uevent_env+0x37d/0x1030 [ 194.087620][ T9813] ? device_get_devnode+0x2e0/0x2e0 [ 194.092820][ T9813] kobject_uevent_env+0x487/0x1030 [ 194.097948][ T9813] ? release_nodes+0x548/0x9c0 [ 194.103482][ T9813] kobject_uevent+0x20/0x26 [ 194.108019][ T9813] kobject_put.cold+0x177/0x2ec [ 194.112856][ T9813] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 194.118839][ T9813] put_device+0x20/0x30 [ 194.123036][ T9813] evdev_free+0x51/0x70 [ 194.127190][ T9813] device_release+0x7d/0x210 [ 194.131762][ T9813] kobject_put.cold+0x28f/0x2ec [ 194.136622][ T9813] cdev_default_release+0x41/0x50 [ 194.141646][ T9813] kobject_put.cold+0x28f/0x2ec [ 194.146488][ T9813] cdev_put.part.0+0x39/0x50 [ 194.151077][ T9813] cdev_put+0x20/0x30 [ 194.155084][ T9813] __fput+0x6df/0x8d0 [ 194.159084][ T9813] ____fput+0x16/0x20 [ 194.163251][ T9813] task_work_run+0x14a/0x1c0 [ 194.167848][ T9813] exit_to_usermode_loop+0x273/0x2c0 [ 194.173253][ T9813] do_syscall_64+0x52d/0x610 [ 194.177831][ T9813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.183732][ T9813] RIP: 0033:0x412071 [ 194.187621][ T9813] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 194.207962][ T9813] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 194.216390][ T9813] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000412071 [ 194.224388][ T9813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.232377][ T9813] RBP: 0000000000000000 R08: 00000000aef80c5d R09: 00000000aef80c61 [ 194.240342][ T9813] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001 [ 194.248302][ T9813] R13: 0000000000a4fdb0 R14: 0000000000000001 R15: 0000000000a4fdc0 [ 194.256271][ T9813] [ 194.258601][ T9813] Allocated by task 9823: [ 194.262917][ T9813] save_stack+0x45/0xd0 [ 194.267058][ T9813] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 194.272710][ T9813] kasan_kmalloc+0x9/0x10 [ 194.277047][ T9813] __kmalloc_track_caller+0x158/0x740 [ 194.282428][ T9813] kstrndup+0x5f/0xf0 [ 194.286410][ T9813] uinput_dev_setup+0x1d4/0x310 [ 194.291242][ T9813] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 194.297216][ T9813] uinput_ioctl+0x4a/0x60 [ 194.301532][ T9813] do_vfs_ioctl+0xd6e/0x1390 [ 194.306115][ T9813] ksys_ioctl+0xab/0xd0 [ 194.310266][ T9813] __x64_sys_ioctl+0x73/0xb0 [ 194.314863][ T9813] do_syscall_64+0x103/0x610 [ 194.319460][ T9813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.325335][ T9813] [ 194.327651][ T9813] Freed by task 9825: [ 194.331630][ T9813] save_stack+0x45/0xd0 [ 194.335804][ T9813] __kasan_slab_free+0x102/0x150 [ 194.340751][ T9813] kasan_slab_free+0xe/0x10 [ 194.345237][ T9813] kfree+0xcf/0x230 [ 194.349057][ T9813] uinput_destroy_device+0xf8/0x250 [ 194.355200][ T9813] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 194.361088][ T9813] uinput_ioctl+0x4a/0x60 [ 194.365436][ T9813] do_vfs_ioctl+0xd6e/0x1390 [ 194.370027][ T9813] ksys_ioctl+0xab/0xd0 [ 194.374177][ T9813] __x64_sys_ioctl+0x73/0xb0 [ 194.378749][ T9813] do_syscall_64+0x103/0x610 [ 194.383325][ T9813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.389193][ T9813] [ 194.391506][ T9813] The buggy address belongs to the object at ffff8880a139ff80 [ 194.391506][ T9813] which belongs to the cache kmalloc-32 of size 32 [ 194.405396][ T9813] The buggy address is located 0 bytes inside of [ 194.405396][ T9813] 32-byte region [ffff8880a139ff80, ffff8880a139ffa0) [ 194.418412][ T9813] The buggy address belongs to the page: [ 194.424052][ T9813] page:ffffea000284e7c0 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a139ffc1 [ 194.434212][ T9813] flags: 0x1fffc0000000200(slab) [ 194.439137][ T9813] raw: 01fffc0000000200 ffffea00026f1ec8 ffffea00028fbc88 ffff88812c3f01c0 [ 194.447710][ T9813] raw: ffff8880a139ffc1 ffff8880a139f000 000000010000003d 0000000000000000 [ 194.456286][ T9813] page dumped because: kasan: bad access detected [ 194.462694][ T9813] [ 194.465006][ T9813] Memory state around the buggy address: [ 194.470638][ T9813] ffff8880a139fe80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 194.478711][ T9813] ffff8880a139ff00: fb fb fb fb fc fc fc fc 00 fc fc fc fc fc fc fc [ 194.486763][ T9813] >ffff8880a139ff80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 194.494821][ T9813] ^ [ 194.498886][ T9813] ffff8880a13a0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.506939][ T9813] ffff8880a13a0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.514986][ T9813] ================================================================== [ 194.523057][ T9813] Disabling lock debugging due to kernel taint [ 194.534788][ T9813] Kernel panic - not syncing: panic_on_warn set ... [ 194.541413][ T9813] CPU: 1 PID: 9813 Comm: syz-executor.3 Tainted: G B 5.1.0-rc3+ #58 [ 194.550697][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.560759][ T9813] Call Trace: [ 194.564063][ T9813] dump_stack+0x172/0x1f0 [ 194.568417][ T9813] panic+0x2cb/0x65c [ 194.572335][ T9813] ? __warn_printk+0xf3/0xf3 [ 194.576944][ T9813] ? string+0x208/0x230 [ 194.581118][ T9813] ? preempt_schedule+0x4b/0x60 [ 194.585982][ T9813] ? ___preempt_schedule+0x16/0x18 [ 194.591104][ T9813] ? trace_hardirqs_on+0x5e/0x230 [ 194.596139][ T9813] ? string+0x208/0x230 [ 194.600310][ T9813] end_report+0x47/0x4f [ 194.604479][ T9813] ? string+0x208/0x230 [ 194.608653][ T9813] kasan_report.cold+0xe/0x40 [ 194.613346][ T9813] ? string+0x208/0x230 [ 194.617521][ T9813] __asan_report_load1_noabort+0x14/0x20 [ 194.623192][ T9813] string+0x208/0x230 [ 194.627198][ T9813] ? widen_string+0x2e0/0x2e0 [ 194.631893][ T9813] ? console_unlock+0x6a7/0xeb0 [ 194.636758][ T9813] ? find_held_lock+0x35/0x130 [ 194.641536][ T9813] vsnprintf+0xbfc/0x1af0 [ 194.645931][ T9813] ? pointer+0xa30/0xa30 [ 194.650185][ T9813] ? string+0x1cc/0x230 [ 194.654352][ T9813] add_uevent_var+0x14d/0x310 [ 194.659045][ T9813] ? cleanup_uevent_env+0x50/0x50 [ 194.664081][ T9813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.670428][ T9813] ? input_dev_uevent+0x110/0x890 [ 194.675465][ T9813] input_dev_uevent+0x163/0x890 [ 194.680335][ T9813] ? input_add_uevent_bm_var+0x150/0x150 [ 194.685997][ T9813] dev_uevent+0x312/0x580 [ 194.690348][ T9813] ? device_get_devnode+0x2e0/0x2e0 [ 194.695556][ T9813] ? kobject_uevent_env+0x2fb/0x1030 [ 194.700878][ T9813] ? rcu_read_lock_sched_held+0x110/0x130 [ 194.706616][ T9813] ? kobject_uevent_env+0x37d/0x1030 [ 194.711921][ T9813] ? device_get_devnode+0x2e0/0x2e0 [ 194.717132][ T9813] kobject_uevent_env+0x487/0x1030 [ 194.722276][ T9813] ? release_nodes+0x548/0x9c0 [ 194.727157][ T9813] kobject_uevent+0x20/0x26 [ 194.731679][ T9813] kobject_put.cold+0x177/0x2ec [ 194.736555][ T9813] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 194.742557][ T9813] put_device+0x20/0x30 [ 194.746730][ T9813] evdev_free+0x51/0x70 [ 194.750916][ T9813] device_release+0x7d/0x210 [ 194.755629][ T9813] kobject_put.cold+0x28f/0x2ec [ 194.760499][ T9813] cdev_default_release+0x41/0x50 [ 194.765750][ T9813] kobject_put.cold+0x28f/0x2ec [ 194.770620][ T9813] cdev_put.part.0+0x39/0x50 [ 194.775244][ T9813] cdev_put+0x20/0x30 [ 194.779442][ T9813] __fput+0x6df/0x8d0 [ 194.783439][ T9813] ____fput+0x16/0x20 [ 194.787436][ T9813] task_work_run+0x14a/0x1c0 [ 194.792058][ T9813] exit_to_usermode_loop+0x273/0x2c0 [ 194.797356][ T9813] do_syscall_64+0x52d/0x610 [ 194.801964][ T9813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.807867][ T9813] RIP: 0033:0x412071 [ 194.811917][ T9813] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 194.831692][ T9813] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 194.840108][ T9813] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000412071 [ 194.848088][ T9813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.856245][ T9813] RBP: 0000000000000000 R08: 00000000aef80c5d R09: 00000000aef80c61 [ 194.864222][ T9813] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001 [ 194.872371][ T9813] R13: 0000000000a4fdb0 R14: 0000000000000001 R15: 0000000000a4fdc0 [ 194.881130][ T9813] Kernel Offset: disabled [ 194.885457][ T9813] Rebooting in 86400 seconds..