[ 45.025217][ T26] audit: type=1800 audit(1554903621.556:30): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.860357][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 48.860372][ T26] audit: type=1400 audit(1554903625.416:35): avc: denied { map } for pid=8327 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. 2019/04/10 13:40:32 fuzzer started [ 55.458699][ T26] audit: type=1400 audit(1554903632.016:36): avc: denied { map } for pid=8336 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/10 13:40:34 dialing manager at 10.128.0.26:44827 2019/04/10 13:40:34 syscalls: 2431 2019/04/10 13:40:34 code coverage: enabled 2019/04/10 13:40:34 comparison tracing: enabled 2019/04/10 13:40:34 extra coverage: extra coverage is not supported by the kernel 2019/04/10 13:40:34 setuid sandbox: enabled 2019/04/10 13:40:34 namespace sandbox: enabled 2019/04/10 13:40:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/10 13:40:34 fault injection: enabled 2019/04/10 13:40:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/10 13:40:34 net packet injection: enabled 2019/04/10 13:40:34 net device setup: enabled 13:42:44 executing program 0: sysfs$2(0x2, 0x2, &(0x7f0000000000)=""/4096) r0 = syz_open_dev$sndpcmc(&(0x7f0000001000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x2040) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000001040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001080)='syz_tun\x00', 0x10) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000010c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000001140)={0xccf, 0x9, 0x9, @local, 'veth1_to_bridge\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000002600)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000025c0)={&(0x7f00000011c0)={0x13dc, 0xa, 0xf, 0x300, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0x6}, [@typed={0x18, 0x87, @str='/dev/snd/pcmC#D#c\x00'}, @typed={0x8, 0x6f, @u32=0x7fffffff}, @generic="68ece3f9f941023c6f9228ebd81215a7f8871356c6b90d0cb77d03ed42f1a92038189c28c41cd524422150175c957a3fa39023e93e42f9ee0d9200d37b331798035aa5a0e0cc9d5dd2454ac0f28599b00fa319bbb7141c304bb79c3382a4bf8dd2ed7965c85900e6e7854083b9d71433cf755ba52fdff8b83cbe8cea4dfd7d25f1827cf1651a02b27aff771b2f81fd0e3128db75a772a1c784f275f9b7df8248baa7c2ca1b3fe90e8af53149b3eb8620a573acf2714e92cd2d386b4e0837e242e63d91a55ae19f18c0633e921706fa9e927f1a4398042d405753e0a2f4f25f1faff0360c80104bc5bea190bbd2d4a9073224d7925d231d3fc2", @nested={0x18c, 0x8b, [@generic="aa6377e22cea2a2c26c4349bf4aad9dd8d967c944ca06da3ebac33fe13c539c3ba4b3c18f1a5aa17999b9c22304f33725bb227570e08cd1aa1df54f3f33f71d96463ccf6573c7d1ebf42b4c7ac5cc8d10e4be727f0e330ec329902def8a26da0c880a6d31874f600a10a8bdea36261c5af3c7e7eee019552d570b6552d44dcdf300cf884ccb705cac617ea4df821b214229571e2f12d4d48e199e8cb87580bc3897ed4c8cbb95417709d03d8b7f0a83e3335d05a19d26e91b11c2049d82da6ceacca76bce4b6bae7a70bd62cb86232ed9e6fd15186536c", @generic="60109b4c5ccb7ce01166d7197632915c4f7050e2df4f2d96950a46623a8c8c759acfa9f12981369244b0e06236c2a9c6fe50d69f1df790d843ee106efdfe6b0e251936fbf4d358d97803635684f46f8e53ca64", @generic="93ac928401a7d15a59db1992371a9ff024f1ea1c709659bd2712601dd4035b609677fcb49fe2e45a18282e98c1a59eca0d7ddd1013c9f645942b211534be5b7aad7ffeaac15b66a020da222707677f37e9f25ece954a9710927901"]}, @nested={0xa8, 0x73, [@generic="63ca728fedd8ee4f72f5dbbba3e4b2e7f9f03c01873f6d28f3d53671fb", @generic="a4428b7c3d7f4aa9251bba10ddd2a982c58091", @generic="0d9e86e88802a7", @typed={0xc, 0x48, @u64=0x6}, @typed={0x8, 0x46, @fd=r0}, @typed={0xc, 0x57, @str='syz_tun\x00'}, @typed={0x4, 0x40}, @generic="c21a40bc4e63cbaffee89a180590038ff63181bc0f513c82802874f79dfe8e3f5dce002213af2c58a65749e4131f7e8ad7e541d321524d2240d37b7a618c00f025943ebc2fe64a"]}, @nested={0x4c, 0xc, [@generic="db05c40d5a289fca0e0b1e4cc422439a832b618a122ab0816de1f2c72934da6e8216c5e998f04f6c72ff3cbcfd52773bdadae9114a6cd6636538f0e66cf419b044eb3a9935f535d5"]}, @generic="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", @generic="b380feffc28b27b587e9055c6d4cdd60e6daf5e9ccd9f4597b5e9202ead07629c4962648de5727dd6e93112b"]}, 0x13dc}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000002640)=0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = msgget(0x0, 0x2) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000002680)=""/25) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000026c0)={0x4, [0x8001, 0x9, 0x2, 0xfffffffffffffffd]}, &(0x7f0000002700)=0xc) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000002740)) r2 = syz_open_dev$sndpcmp(&(0x7f0000002780)='/dev/snd/pcmC#D#p\x00', 0x6, 0x8040) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000027c0)={'ip6_vti0\x00', {0x2, 0x4e23, @multicast2}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002840)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x24, r3, 0x804, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xfffffffffffffffd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002980)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={&(0x7f0000002940), 0xc, &(0x7f0000002a80)={&(0x7f00000029c0)={0x84, r4, 0x218, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002b00)={'eql\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000002b40)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000002b80)=0x3, 0x4) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000002bc0)=0x8000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000003cc0)={0x8, 0xecf, &(0x7f0000002c40)="02d5c963ccd7b11ea77fb7122ce1017819e75c823359502ef19724e1b096cd1bab74fb45def83900a6c1129e80561d6843ac92e0538c0112129a296cc3a77194bbc47be181ebc1462b9ec73e4eac0244364de7d2e8f3327d", &(0x7f0000002cc0)="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", 0x58, 0x1000}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000003d40)={0x1, &(0x7f0000003d00)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000003d80)={r6, 0x1}) ioctl$TCSBRK(r0, 0x5409, 0x30) [ 187.714175][ T26] audit: type=1400 audit(1554903764.266:37): avc: denied { map } for pid=8351 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15737 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 187.803163][ T8352] IPVS: ftp: loaded support on port[0] = 21 [ 187.908823][ T8352] chnl_net:caif_netlink_parms(): no params data found 13:42:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x8, 0x72, 0x9}) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x1, 0x1, 0x4}, 0x1}}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x9, 0xc7, 0x1, 0x0, 0x0, [{r0, 0x0, 0x85}]}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000140)={0xf, {0xe8, 0x70, 0x5, 0x100000000}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x8, 0x7, 0x8001, 0x2, 0x4}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) acct(0x0) r1 = getpid() lstat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002840)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000002940)=0xe8) getresgid(&(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00)=0x0) r7 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005840)={0x0, 0x0}, &(0x7f0000005880)=0xc) getgroups(0x1, &(0x7f00000058c0)=[0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005900)={0x0}, &(0x7f0000005940)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005980)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000005a80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005ac0)={0x0, 0x0, 0x0}, &(0x7f0000005b00)=0xc) r14 = getpgid(0x0) r15 = geteuid() fstat(r0, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005bc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005c00)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000005d00)=0xe8) r19 = getegid() sendmmsg$unix(r0, &(0x7f0000005e00)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000280)="256c6bdcd40d462c6f6dfebc3718822ba51eaab08a99dcf5a3936b5c264d863c27662b590229e67186ac313e9338f2e32a36134c9703eed72509716baf946c951587349ee7c853761414015f802f03bd5e193c74ca769e15b2b0a210ac299b2b9ea2486737632ac10f67095c940739", 0x6f}, {&(0x7f0000000300)="a6c1bf219799ae323fc1b358a84bae61d8444200977b0ef1e5fa918cfc964d03f52a024fc1c19e78039b432484aeb9c5af64bc370d4ab6631dba604aff2fd21cfa31269182ed858778c110bfe055bb4d9ef2a23195c6fe3d776b85b537ecbf92a0ff57e41ec80104f1fd28257f5f0298aec9b08d0102c8830288aa354b07c0f25f0ebb2fec1061620537fe50aa7a083c79110e289fe5aced49c87e82536eeea6094dd6b550af4df4f81c17b362c12212e19f11f74a559976ec6bb18a95c4d80ba302acb6340525491279c5833b1f7d7ba29c0ced83d613c8c21812e121acb3e226f8a9025f94c648ea89ca73bcdd", 0xee}, {&(0x7f0000000400)="f495fe589c52b1bac66037bc81732a309854a398790cc6f7a7e50db017f37b800dbea917953557b7cb2ba8bd313033745f03922b30cec9495fd33ecc967caa8bdda766b45b2886e2c5f245a03a3786205e9460840991c058f9cd755db017ba9166aeac282b52f2d474e0be00ee87c180d6b35e611e163d6218d47993e19ccf70907108531373d4453efb6c58c7fb477db0bef2d70ed7403fd440f3352d2cd0738f842933d412f4e9ba9910ccc58f35132c08", 0xb2}, {&(0x7f00000004c0)="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", 0x1000}], 0x4, &(0x7f0000001500)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x10}], 0x60, 0x80}, {&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="bbcf448d9e632cba6b767931426735fd49da303e3715d587469b6f544b8ce650c425ca793b71ee550de8", 0x2a}], 0x2, &(0x7f0000002a40)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x68, 0x10}, {&(0x7f0000002ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002b40)="a76d6aa460601d44b8cd9b2f6fdc7be0ad1b0d80de64a343f0e4ebd83f8e5754ddad34be4687abc205fec18a75dae8cd62ee2eaf88f972d16ec99fdfdbe4e1177146f59fb84ec8004737e79deb55a9e8e587a09c6873eab784dc9e52dcb38e7c998e18f9119260eff2bd7e17869af628953526f92665ecf9d1273ac24c6eb32a79e5d63c7f45a2127ec30b35dcd2fecde6b155ff97ee33a2e859dba28ce0d9c115773659ef232e3c72", 0xa9}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="8028e12e01790ddd59a5a4c07552d2764ac95a049f07a939eea7badcc755cf7e0e252329680cf860dd78e863f35104cd55fa8ed50b6497b7c49c1fe21a61a2b41307b5c6ebd7465853988195114b002d2b", 0x51}, {&(0x7f0000003c80)="d441ddd0eb0e51bb133fa185059e458eb267617ecc7845e281f73de700338b5c495dd238ffb672776e0781ce27f658f43bc01da8b3b266c69373aedfcb7d5e7d7a75f20764f74816e12aa7a3cd82cbfdd0394b4e2061d47ef9d62a3f235ca1c31945f163d419d1c5de1ce61d85a6d95874b612cfdc6328a857b959492544bd0b24cc9659ed7d0948c0af038a31508cac31e406ad157f9fd506a27197740971a72d48bb8696fe07a7ebca21ad299f1a71f4388760bdbd3a5207bfc4dc3b561e76007e1af2", 0xc4}, {&(0x7f0000003d80)="d75ae534793feabdac9d74fe14ef747afd8292be3cd4d241c31aa783ff70b048d4e690d4ba1f6e155d5a7f94b956cf99f7beefbbbc61290ae33ce888443edd9e8a864f6d1be0fbcd6fc6de4d49ef3566cdf905d5189c9336c4728921ca32a8b49ccf060b73f7f50b85fee3fa080f047ab37acc09704fe3d12b295e97da7523ad05c87f949f5ceede1b46114eb7b5077947084324795b0dc09eec2cc19de5cc0038d3f81e2827f9c0c91b237f31f487931c25c2d804e076688450a6c3aed22a55744d614000bfb7da6e071937174dfabb6cc13aaef98144df616d34728d708d3cbdbd06a853514c311e9a7202c99a6feb", 0xf0}, {&(0x7f0000003e80)="3712c314e956462de44aad610a0404d522d88a91ca1fa69a7d18daeacc5c6cec1e9be55b670f8fe753b1d15bcf2e66fee2cfa613774f88da77a8a2ef27aa7f08f0a080533bade5c34908f693895eee78403ce442580b5c4ac6e2eae29e14dd58c5b8e43a", 0x64}, {&(0x7f0000003f00)="70183bf1aa112d22c884e33ec0bc9fd16beaff421b0ba8eed3d4616e85cb17e9969bbfa42ee695151c811c7704a9bd036fb7ea73f7b8bf50c8adc0929fb2b25d23e139c607c38d87aac82a17a19c73064daa8e152aae812f10df1e5bb3560a26ee5c7ee866ff0123a691fffa386aa3446e4f766039f0", 0x76}, {&(0x7f0000003f80)="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", 0xfb}, {&(0x7f0000004080)}], 0x9, 0x0, 0x0, 0x20000000}, {&(0x7f0000004180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005780)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="9e191b173a41fad7142e538b2353b91f8421adb6a3a0bb13c19533bdf68928b7d737eddca96203c7c0f6a814ed55203658ed032d2c82b563ca5831669e8d59a1ebf81e6bcecd84a9bd11", 0x4a}, {&(0x7f0000005280)="499ac34256ff4ee10428e80e1d9981249e71ac7b91d5f701c6a64b5a32b7e2290d5b474b4124ada54fcf55223387def5393873f56b73933af3b4f78cc65c94c0d0cffecd513a7e125add7efbe07a09d31346425febb639c5c29de577b0b11db7f13c20e54eecd09d5aaaee2cb75767ff90a13516aa4c76d5bf050240705520966a4b1dd1ae83d7d4ec2e83b4343ddab31e089616d5d2846050d94cda4f2d76b2baf99e00aa8fbc08d7cb90", 0xab}, {&(0x7f0000005340)="b6d6fab35f2894b1a45be49215642ac1834789979ffd1d3cd00c3615cc9d499783d546ea3c3ec20b9ec1693df67f46e87d0892a6d36fd8e130be7a4134ca69aa3b956a953a5ad44587b8b8dc7103ba438a04d1730ac5d54981ed128b2bfd32818d1b7a9ac0e9415378b3fa49fa6eb40e66a123738decf2061495332d321ad9becbb2b5551835e39c3fc861d24adf33fefddbfc7c9032bfada9a858be96125483fe72175b9c8436194b", 0xa9}, {&(0x7f0000005400)="e525cea614911cac66db1e7697ff60f234f163d10bc6ff391d7b", 0x1a}, {&(0x7f0000005440)="c86e44adbe82f7dc7e9b1e413a2ce692669936a21e76f6b2444fd5023b2299946bbb29385ff590e634dffa8b9ff1311f5e0497599cc0eefa6340a216c2652b0ba347dbb304adb0f8b5fdb25f5aab573e86208361d1aa9f0295e53c1c554b5ab4257afa88d1df46a709b2d234782ccb1ad483c0066f452e444be537ae82ef9499798d6441d96e5ef2a2cb747ce981454938b5365eeb620dbf5f911b1124e1ed84c3e8e9a05a51", 0xa6}, {&(0x7f0000005500)="d49a1ee297f8f6186e0d0a90a27205f0cada4bc4dacfaf7698faed29c2eeab21d2ecad053911c8c27dc49ca2119a9d8b349e6889512a7c772d017ba8a4252f480cdb9df38484fa5076e72802bf50cab303c927f8b115775da5ac4d67a945fa192246845e9f4b38f598c367e14560ed15b60e13acadbf21861a91c3697b0bb682144da35476a0abef48392418d9fe63fa7a215976562bf7e1fbea0e094ddea5eba0608865ae36c9664e36086a5b14af885733c809a7212cfe8c23c3d227cb356de1020dcbd8222fa153feaebd0fbaf9c51148e80a4bb02c6baed09b559dbbe1fe", 0xe0}, {&(0x7f0000005600)="5811ab9c71451dfb5a832534ed562a9d109a26a02dcacb9a88ace65448f731192f61b2f9bad9b587eaf1d493eacb11d8e1ed35ba5f5664", 0x37}, {&(0x7f0000005640)="207a97969e4923a50a8e29b7cdc456d3fd8416b60c46824bc0c9819fefc856e69b9e6efe3f643dd2d3188e0259feae293240a9e2cdc5df46fd37f49a7155dd1026f2ee2690b61afec5aaaa8bd8c6272575f7b06f3a7c67fadf1399c8e2a39bdf433bea914741d25957687a44b1a317ec797dceddb0d2d96d", 0x78}, {&(0x7f00000056c0)="092d5ff3beee9080a6e1fd78eded2a58d430dc71da59a4a424bddb26f854ff38abfbf58a6237934aa6986df4f03988c5342f423ac8d9108543e43e30646c8eebca8b5da34df5eed8bf9de8da3c6a0e3003076c5c44971e21a15b469d841d4fe44cf821a80b7bda329fb5854967d8adc1b02c9d4528af7c3a841386648a15d774b56186673098dd46bd008904ac080a3d205cd4d180bc6b60ce452039b73e841b8ef9a633b5c6a04f8a", 0xa9}], 0xa, &(0x7f0000005d40)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0xc0, 0x4008000}], 0x4, 0x0) read(r0, &(0x7f0000005f00)=""/131, 0x83) sched_getattr(r12, &(0x7f0000005fc0), 0x30, 0x0) [ 187.955411][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.985417][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.995710][ T8352] device bridge_slave_0 entered promiscuous mode [ 188.025092][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.067666][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.088430][ T8352] device bridge_slave_1 entered promiscuous mode [ 188.120018][ T8355] IPVS: ftp: loaded support on port[0] = 21 [ 188.131927][ T8352] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.144456][ T8352] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:42:44 executing program 2: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x16800000000, 0x3f, "d638db8d6557d7032906a720aee46bfea7c9c4f078d5be661bbef6b47cab0620202a0b0aadbb682f3d86c9164e3a4580ad8799598a0da6279a015c9f86c270"}, 0x47) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0xffffffff7fffffff, 0x0, 0x0, 0x80, 0x17, 0x5e9d6fcf, 0x2, 0x4000000000000000, 0x7ff, 0x8, 0x8, 0x1}) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x10000002) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x8) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000280)={0x2, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000300)={0x1d, r3}, 0x10) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000380)={0x10001, 0x0, 0x4, 0x0, 0x3f}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0)={0x5}, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000480)={@loopback, 0x54, r3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000500)=&(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000540)={0x6}, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580), 0x0) fstat(r1, &(0x7f00000005c0)) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x26) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000640)=0xfffffffffffffffe) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000680)={{0x2, 0x4e23, @rand_addr=0x7}, {0x306, @dev={[], 0x28}}, 0x66, {0x2, 0x4e22, @local}, 'nr0\x00'}) signalfd(r1, &(0x7f0000000700)={0x9}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000740)={0x2, [0x1, 0x1]}, 0x8) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000780)={0xfffffffffffffff9, 0xffffffffffffff81, 0x4, 0x6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000007c0)="9992169260b5b45478fa71d4d60410cd32bffcec0f6b4164de36bbe9bbdcbf91755c5455c7041e1481f72a9f2c1f3c1517e02c0a4de380ee4b1a92b267c60fd3b34103f0dae5a888d54a354589e5353a291ebd0b0f99815b28baa491aed4e13e8eecc8063a4e0eb91c83ceedf036f2fe9965647a4f336bc1182757b7bfee466635a36dde9625d8af6db6c6d5b55229026493934904dcef64366f04a3356d") ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000880)={0x24, "19f6677117391eed74251e8b07403196ef0cef9f3daee1c3e4339fd688c99544b427f39732fbb2cc9071cc0c53c250b17d5669c1a0e28a94921c0df7c6170933196558d91c80b2df8b20dc3532902135f7cc3e6d188123e5ba0d36db3f1a572f5d925d085a30798309ce03e9bc6787f746d235df2a4fb0ec8e626f4fe33e1c98"}) mkdir(&(0x7f0000000940)='./file0\x00', 0x1) [ 188.204060][ T8352] team0: Port device team_slave_0 added [ 188.213230][ T8352] team0: Port device team_slave_1 added [ 188.322436][ T8352] device hsr_slave_0 entered promiscuous mode [ 188.376981][ T8352] device hsr_slave_1 entered promiscuous mode 13:42:45 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r0, 0xfffffffffffffff8) r2 = semget(0x1, 0x5, 0x11) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000000c0)={{0x8, r0, r1, r0, r1, 0x51, 0x9}, 0x3, 0x9, 0x1}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x101000) mq_getsetattr(r3, &(0x7f0000000180)={0x8, 0x2, 0xebd, 0x5d29, 0x5, 0x0, 0x8, 0xffffffff}, 0x0) write$P9_RAUTH(r3, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x0, 0x3, 0x4}}, 0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x30, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0xc000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x24002404}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r5, 0x310, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff00000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xc0}}, 0x20044080) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000540)) accept$nfc_llcp(r3, &(0x7f0000000580), &(0x7f0000000600)=0x60) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000640)=0x4008) write$P9_RVERSION(r3, &(0x7f0000000680)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r3, &(0x7f00000006c0)="776578af5a1ae999f4cf4e17d19b3f47cee7b43fb3ef18f5b57376368681ee8bff307052ec6e37c5d79a5b35f78d42c2c99ca6a893551b491f89de2f1cb0311cec1e1053abf65aca958d49d95564227366c49b1117299291cafbb9c02c27d58abb7ff2d91a03a9f8ae11ece14aa980c97a15ca814f6f9877944c51ae2409c89d2737f4042febc76b9e2194cf9b2fb8d5f367d6a13d4cff732ad8e46e61384b", &(0x7f0000000780)="edc23df3f69ed57ddad961a3791d202c920242701f0f694fee7b020eb5a11a230ed45b9483e651b77258894f021bda7df9405b12853f0ea6c9560eaee5e248c0ff3d3df8bbcbb6b1d6fd47ea56d1e1dbdf8893468d9f2fa6c911ae2ed4f5fc0604df8f07a8fe799eab275db86af9e2b6f71c91e0737a0a6264a65c43e013d0b3a278816d567e04696aabac0868013a0fa8e7131b6e1f82f39505a8b2402241fbff397be9510aa6d4fc27db0b527c0e2309a8a4fef1661b3ae2b74bcfeee355ba1c67870ecc5186c8c34acabe9a6cdef7c84a6095e7c3ca97955be98b20b3", 0x1}, 0x20) statx(r3, &(0x7f00000008c0)='./file0\x00', 0x0, 0x100, &(0x7f0000000900)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/mixer\x00', 0x111001, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000b40)=""/9, &(0x7f0000000b80)=0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000bc0)="86809205e4c9a5dd45b09af5b6244556ee49ddbd19a49d7f654ac1efd5bf0dd0acb9d471cce29715fd92abcae287d263c38e97e5366a51b4528a16bdca09f9cf569f0482c5fcff49ccb9499a9d4e49b5b9975abe5e26cd8de92b4ee94f46957c1575bf8b4c3c2a06347f1990f2e5", 0x6e, r6}, 0x68) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000f80)={r7, 0x1, 0x6, @dev={[], 0x10}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000fc0)={0x180000, 0x9, 0x4, 'queue1\x00', 0x101}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000001080)={0x4, 0x0, [{0x1, 0x80, 0x4, 0x3, 0x5, 0x81, 0x7ff}, {0x0, 0x2e33, 0x3, 0x1, 0x1, 0x2, 0x1}, {0x0, 0x0, 0x4, 0x5, 0x6, 0x1, 0xffff}, {0xc000000b, 0x18000000, 0x1, 0x1f, 0x10000, 0x10001, 0x10001}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001140)='/dev/ashmem\x00', 0x40000, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setlease(r6, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001180)={0x0, 0xcf, "820d9ed7a31785ce8d16423a6ba173dafb7970d5bea3df030b0b08f4df1c8ffface5512b1de6ae3a3568d455fbf2b159269c911cb6e88b437230d1ea1c7c73be6af0005bcb70bd4f3adbed826bc52fc585ca2e32545e730fa11d0e6635e07315dfd546218636594974019075198c9274d280e6c46a14e053ae5c0f5179acc2bc3546db08fcceb202d3910eed5cec2a71a8ee9c23a6aee5d081507390c00019234ff21e2cca3ad94b47f75d6298bd50deaf855e51f22c4fb4c9aa628981d240c95ebcf6f5038313c0fc8d68c84fec37"}, &(0x7f0000001280)=0xd7) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000012c0)={r8, 0x55c7, 0x6, [0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x8001, 0x6]}, &(0x7f0000001300)=0x14) [ 188.435027][ T8358] IPVS: ftp: loaded support on port[0] = 21 [ 188.451239][ T8355] chnl_net:caif_netlink_parms(): no params data found [ 188.505543][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.517273][ T8352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.526345][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.539350][ T8352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.665778][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.677723][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.692522][ T8355] device bridge_slave_0 entered promiscuous mode [ 188.725282][ T8361] IPVS: ftp: loaded support on port[0] = 21 13:42:45 executing program 4: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x100000, &(0x7f00000000c0)={'trans=unix,', {[{@noextend='noextend'}, {@access_user='access=user'}], [{@smackfsdef={'smackfsdef', 0x3d, 'keyring'}}]}}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x224202, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000001c0)) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000200)={0x7f, "1d1c7c2563db05153ee65cf88ce83dc6835cf4cad4f1587989b4d1b8158938b6fa26df4f355d646b7122f49dda7db631ca1eedfe9e7f95678ab7987dea9b2da97cf815249c2f8e4188abadcddefc2e051b1fa20fa9e61159c2448f531d78cde6b8dc44d024a3598f8dce0efddf5fc2181a5461f92d3d6acf85ae022f9df339b2"}) bind$can_raw(r0, &(0x7f00000002c0), 0x10) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x20040000) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000500)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x3, "e65bb3"}, &(0x7f0000000580)=0xb) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={r4, 0x80000001}, &(0x7f0000000600)=0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000640)) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000680)="2f44c36565d65e9fb7d48f89ed7e1f7aa505861fad4642bc25f64ea989cafa52a4eeca881ca37ce4a40f8f307747fad54683bd201c4e8508c6319ad2a4413904d090fb4ab6a92c587f8ffdb72b317499d2159d6c70cba5de2b6fc8ecec351129987cd7dd3d2265e5d3c0cfe3fda369a7503ffb8bf1b9b923c21e01508aef9b74773e2502edc3b2744b16b11d3aa88aa5", 0x90}], 0x1, 0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000780)=0x92, 0x4) fgetxattr(r2, &(0x7f00000007c0)=@known='system.sockprotoname\x00', &(0x7f0000000800)=""/187, 0xbb) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/checkreqprot\x00', 0x4000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000900), 0x10) r6 = open(&(0x7f0000000940)='./file0\x00', 0x0, 0x8b) openat$ppp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ppp\x00', 0x290080, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vcs\x00', 0x2100, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) clock_adjtime(0x6, &(0x7f0000000a40)={0x7fff, 0x1, 0xf77c, 0x3, 0x7, 0x80, 0x6, 0xfc57, 0xff, 0x800, 0x40, 0xffffffffffff3ff3, 0xb7, 0x0, 0x3, 0x4, 0x2, 0xa900, 0x0, 0xfff, 0x200, 0xa5e0, 0x8, 0x10000, 0x8, 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000b40)={r4, 0x5}, &(0x7f0000000b80)=0x8) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000bc0)={0x3, r2}) getsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000c00)=""/4096, &(0x7f0000001c00)=0x1000) ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000001c40)=@null) [ 188.750508][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.772954][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.782913][ T8355] device bridge_slave_1 entered promiscuous mode [ 188.803074][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.846226][ T8352] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.860549][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.874529][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.908377][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.929412][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 188.983910][ T8365] IPVS: ftp: loaded support on port[0] = 21 [ 188.992061][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.027195][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.034324][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.061532][ T8355] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.084178][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.096782][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.105332][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.112518][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.121701][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 13:42:45 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/227, 0xe3, 0xff, 0x5, 0x7fff, 0x3, 0x7f}, 0x120) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000280)) prctl$PR_SET_FPEMU(0xa, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000002c0)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000300)=r1) readahead(r0, 0xeb, 0xe424) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90a0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffff800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8001, @loopback, 0x74fd}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @remote, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000005c0)=0x8001, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000600)=[0x2], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000680)={0x8, 0x100, 0x2, 'queue1\x00', 0x834c}) getsockname$ax25(r0, &(0x7f0000000740)={{}, [@default, @default, @null, @default, @remote, @remote, @default, @bcast]}, &(0x7f00000007c0)=0x48) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast1, @local}, &(0x7f0000000840)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000880)={@ipv4={[], [], @broadcast}, 0x2b, r4}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000008c0)=""/18) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000900)='yam0\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x9, 0xbe, 0x1ff, 0x1f, 0x10000}, &(0x7f0000000a00)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000a40)={0x6, 0x0, 0x8000, 0x5, 0x9, 0x6, 0xf7, 0x0, r5}, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000b00)='team_slave_0\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @multicast1}, &(0x7f0000000b80)=0xc) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000c40)={r5, 0x9, 0x40, 0x6}, 0x10) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000c80)={0x80000000, 0xd, "e8da1a30f4a51fd63f4028bc1cfa3a806e971c237d000c5b7b7f6e684402690d", 0x1, 0xfffffffffffffb28, 0x5, 0x23f7, 0xfff, 0x80000001, 0x40, 0x6b7b, [0xf2e, 0xdaa8, 0x5ec17412, 0x7]}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) [ 189.132618][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.143343][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.153640][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.167922][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.185115][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.200186][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 189.226057][ T8355] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.237838][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.247733][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.260233][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.270148][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.278812][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.312189][ T8355] team0: Port device team_slave_0 added [ 189.325974][ T8352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.350147][ T8355] team0: Port device team_slave_1 added [ 189.365718][ T8367] IPVS: ftp: loaded support on port[0] = 21 [ 189.442592][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.452332][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.460728][ T8358] device bridge_slave_0 entered promiscuous mode [ 189.568338][ T8355] device hsr_slave_0 entered promiscuous mode [ 189.646930][ T8355] device hsr_slave_1 entered promiscuous mode [ 189.701545][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.709589][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.718963][ T8358] device bridge_slave_1 entered promiscuous mode [ 189.758167][ T8361] chnl_net:caif_netlink_parms(): no params data found [ 189.785961][ T8358] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.802228][ T8352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.824214][ T8358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.863329][ T26] audit: type=1400 audit(1554903766.416:38): avc: denied { associate } for pid=8352 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 189.956052][ T8358] team0: Port device team_slave_0 added [ 189.970453][ T8358] team0: Port device team_slave_1 added [ 190.022041][ T8361] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.033172][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.053729][ T8361] device bridge_slave_0 entered promiscuous mode [ 190.077264][ T26] audit: type=1400 audit(1554903766.636:39): avc: denied { create } for pid=8371 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:42:46 executing program 0: 13:42:46 executing program 0: [ 190.104049][ T26] audit: type=1400 audit(1554903766.636:40): avc: denied { write } for pid=8371 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 190.132309][ T26] audit: type=1400 audit(1554903766.636:41): avc: denied { read } for pid=8371 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:42:46 executing program 0: [ 190.200107][ T8358] device hsr_slave_0 entered promiscuous mode 13:42:46 executing program 0: 13:42:46 executing program 0: [ 190.247027][ T8358] device hsr_slave_1 entered promiscuous mode 13:42:46 executing program 0: [ 190.300725][ T8361] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.330078][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.350544][ T8361] device bridge_slave_1 entered promiscuous mode 13:42:46 executing program 0: [ 190.396310][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 190.507937][ T8361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.519205][ T8361] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.558404][ T8367] chnl_net:caif_netlink_parms(): no params data found [ 190.592089][ T8361] team0: Port device team_slave_0 added [ 190.603228][ T8361] team0: Port device team_slave_1 added [ 190.611700][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.628648][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.636021][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.645260][ T8365] device bridge_slave_0 entered promiscuous mode [ 190.719724][ T8361] device hsr_slave_0 entered promiscuous mode [ 190.757117][ T8361] device hsr_slave_1 entered promiscuous mode [ 190.800710][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.808183][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.815832][ T8365] device bridge_slave_1 entered promiscuous mode [ 190.843060][ T8365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.879266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.888621][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.908165][ T8365] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.920956][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.935682][ T8355] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.945700][ T8367] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.964295][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.981669][ T8367] device bridge_slave_0 entered promiscuous mode [ 191.016174][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.027846][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.038148][ T8367] device bridge_slave_1 entered promiscuous mode [ 191.063444][ T8365] team0: Port device team_slave_0 added [ 191.074734][ T8365] team0: Port device team_slave_1 added [ 191.083533][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.096906][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.107026][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.121448][ T8360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.132344][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.152051][ T8367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.169772][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.179300][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.188905][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.204573][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.213868][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.221838][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.230298][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.245316][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.259387][ T8367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.368817][ T8365] device hsr_slave_0 entered promiscuous mode [ 191.427130][ T8365] device hsr_slave_1 entered promiscuous mode [ 191.487635][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.508494][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.532832][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.563553][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.583182][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.601770][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.615301][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.627220][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.649650][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.663464][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.686200][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.696326][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.709769][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.722821][ T8367] team0: Port device team_slave_0 added [ 191.731665][ T8367] team0: Port device team_slave_1 added [ 191.779336][ T8355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.796074][ T8355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.818721][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.838297][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.851977][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.867176][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.876962][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.893845][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.904003][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.917106][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.927404][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.936465][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.947757][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.964425][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.973372][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.981372][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.006470][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.018598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.027846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.054497][ T8361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.094348][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.120479][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.132315][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.140318][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.189392][ T8367] device hsr_slave_0 entered promiscuous mode [ 192.248241][ T8367] device hsr_slave_1 entered promiscuous mode [ 192.287875][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.308484][ T8361] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.342116][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 13:42:48 executing program 1: [ 192.361321][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.372664][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.379816][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.427429][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.451074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.465940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.475320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.485106][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.492561][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.501162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.529647][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.538589][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.547958][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.575395][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.585551][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.601682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.611285][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 13:42:49 executing program 2: [ 192.651508][ T8361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.682871][ T8361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.706407][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.734089][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.745830][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.755920][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.764496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.772968][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.780944][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.791479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.807806][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.820553][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.829049][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.836105][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.864168][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.873215][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.883683][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.892245][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.899406][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.908026][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.917127][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.925652][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.934572][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.944424][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.970992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.979995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.989998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.998448][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.011339][ T8361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.022293][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.032339][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.045772][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.069692][ T8367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.089248][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.117225][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.133915][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.154070][ T8367] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.173639][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.190009][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.209689][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state 13:42:49 executing program 3: [ 193.216847][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state 13:42:49 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 193.273999][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.282946][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.304909][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.323497][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.330692][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.342931][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.351939][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.362531][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.372255][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.382530][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.419470][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.433009][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.446134][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.459006][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.539564][ C0] hrtimer: interrupt took 32236 ns [ 193.948793][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.154091][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.185439][ T8367] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f0000000280)={0xa2, @time}) 13:42:50 executing program 0: 13:42:50 executing program 1: 13:42:50 executing program 2: 13:42:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 13:42:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) 13:42:50 executing program 0: socket$netlink(0x10, 0x3, 0xc) socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x1a4, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0xfffffffffffffffe}, 0x28) 13:42:50 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 13:42:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x40505331, &(0x7f0000000280)={0x0, @time}) [ 194.363020][ T8436] overlayfs: missing 'lowerdir' [ 194.378919][ T26] audit: type=1400 audit(1554903770.936:42): avc: denied { name_connect } for pid=8433 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 13:42:51 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 194.504300][ T26] audit: type=1400 audit(1554903771.016:43): avc: denied { create } for pid=8444 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 13:42:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f00000001c0)) 13:42:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) socketpair$unix(0x1, 0x20800000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x1}) [ 194.627203][ T26] audit: type=1400 audit(1554903771.086:44): avc: denied { prog_load } for pid=8444 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 13:42:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x20, 0x2) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x2710}, 0x1, 0x400000000000063, 0x400000002}], 0x4de) [ 194.757888][ T26] audit: type=1400 audit(1554903771.236:45): avc: denied { prog_run } for pid=8444 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 13:42:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) accept4$netrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x68e71b8865b7274a) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000280)={0x0, r3}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x80000000, 0x4) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x6ff3e968}) 13:42:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045567) [ 194.792999][ T8473] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 194.941028][ T8482] input: syz1 as /devices/virtual/input/input5 13:42:51 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:51 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x3, "7e79d87f9e6f74005256bac7ab4ff4d841a27107318962cfcb4863872104ffef"}) 13:42:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) accept4$netrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x68e71b8865b7274a) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000280)={0x0, r3}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x80000000, 0x4) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x6ff3e968}) 13:42:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) finit_module(r2, &(0x7f0000000100)='\x00', 0x3) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r3 = creat(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) unshare(0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0xfffffffffffffffd) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:51 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 13:42:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045568) 13:42:54 executing program 0: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x88a) shutdown(r0, 0x1) 13:42:54 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:42:54 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:54 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:54 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:42:54 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, 0x0, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) writev(r2, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) 13:42:54 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0xe}) 13:42:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) 13:42:54 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:54 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xffffff81, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:42:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:42:54 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') pread64(r1, 0x0, 0x0, 0x0) [ 198.152430][ T8561] input: syz1 as /devices/virtual/input/input8 [ 198.298185][ T8565] input: syz1 as /devices/virtual/input/input9 13:42:57 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:42:57 executing program 4: r0 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x0, "7e79d87f9e6f74005256bac7ab4ff4d841a27107318962cfcb4863872104ffef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 13:42:57 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 13:42:57 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:42:57 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x0, 0x4, 'fo\x00', 0x20, 0x90c8}, 0x2c) 13:42:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045564) 13:42:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) [ 200.699040][ T8585] input: syz1 as /devices/virtual/input/input10 [ 200.825097][ T8594] input: syz1 as /devices/virtual/input/input11 13:42:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 200.968803][ T8597] input: syz1 as /devices/virtual/input/input12 13:42:57 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 201.061020][ T8602] input: syz1 as /devices/virtual/input/input13 13:42:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) creat(0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:57 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup2(r0, r0) bind$tipc(r1, &(0x7f0000000040), 0x10) 13:43:00 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:43:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:00 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup2(r0, r0) bind$tipc(r1, 0x0, 0x0) 13:43:00 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:00 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = inotify_init() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 13:43:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r1 = getpid() rt_sigsuspend(&(0x7f0000000000), 0x8) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x1000003, 0x0) [ 203.730686][ T8634] input: syz0 as /devices/virtual/input/input14 [ 203.741491][ T8636] input: syz1 as /devices/virtual/input/input15 13:43:00 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lapb0\x00', 0x0}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(r1) 13:43:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x78, &(0x7f0000000000), 0x4) [ 204.027721][ T8665] input: syz1 as /devices/virtual/input/input17 13:43:00 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:03 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x0, @loopback}}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(r1) 13:43:03 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @initdev, @local}, @igmp}}}}, 0x0) 13:43:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:03 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:43:03 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 206.759364][ T8687] input: syz1 as /devices/virtual/input/input18 13:43:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x8) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) 13:43:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:03 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace(0x18, r0) r2 = dup(r1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="b7", 0x1}], 0x1) 13:43:03 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) [ 206.968606][ T8715] input: syz1 as /devices/virtual/input/input19 13:43:03 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x8000000000002, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 13:43:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', '+wlan1md5sum@system*.*vboxnet0wlan1\x00'}, &(0x7f00000000c0)='[cpuset[keyringeth1eth0\x00', 0x18, 0x1) 13:43:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:03 executing program 4: 13:43:04 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:43:04 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:04 executing program 1: 13:43:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:04 executing program 4: 13:43:04 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001040)=0x4, 0x4) 13:43:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 13:43:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000080)=""/16, 0x10) dup2(r0, r1) 13:43:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:04 executing program 2: 13:43:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 207.876162][ T8777] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:43:04 executing program 2: 13:43:05 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:43:07 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:07 executing program 2: 13:43:07 executing program 1: 13:43:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 13:43:07 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:07 executing program 2: 13:43:07 executing program 1: 13:43:07 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:07 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:07 executing program 1: 13:43:07 executing program 2: 13:43:07 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:07 executing program 1: 13:43:07 executing program 2: 13:43:07 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:07 executing program 4: 13:43:07 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:07 executing program 2: 13:43:07 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:07 executing program 1: 13:43:07 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:07 executing program 2: 13:43:07 executing program 4: 13:43:07 executing program 1: 13:43:07 executing program 2: 13:43:08 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:08 executing program 4: 13:43:08 executing program 1: 13:43:10 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:10 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:10 executing program 4: 13:43:10 executing program 2: 13:43:10 executing program 1: 13:43:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:10 executing program 4: 13:43:10 executing program 2: 13:43:10 executing program 1: 13:43:10 executing program 2: 13:43:11 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:11 executing program 4: 13:43:13 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:13 executing program 1: 13:43:13 executing program 2: 13:43:13 executing program 4: 13:43:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:13 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:13 executing program 1: 13:43:13 executing program 2: 13:43:13 executing program 4: 13:43:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:14 executing program 4: 13:43:14 executing program 1: 13:43:14 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:14 executing program 2: 13:43:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 13:43:14 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:43:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 217.818899][ T8983] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:43:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000040)={[], 0x0, 0x10000ffff, 0xc4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 13:43:16 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 13:43:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}, @icmp=@timestamp_reply}}}}, 0x0) 13:43:17 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:17 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:17 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:17 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') flistxattr(r0, &(0x7f0000000280)=""/204, 0xcc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x2, 0x0, 0x7, 0x81, "141c884212a5da90a1750ba5a7dcc53caf2093c154a8e310539d0c7b018f9c2e0dfbe153262670b9b85ef61c95f14113c95fb908e5c2584cc429de0eb400dd", 0x9}, 0x60) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x7, @empty, 0x1c}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000000c0)}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000001200)=""/151, 0x97}, {&(0x7f00000012c0)=""/197, 0xc5}], 0x5, 0x3c) r2 = getpgid(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000380)='sessionid\x00') ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000003c0)={0x7f, 0x80000001, @value=0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x1000, 0x100000001, 0x8, 'queue0\x00', 0x7}) 13:43:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) 13:43:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:20 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:20 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:20 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) r3 = memfd_create(&(0x7f00000000c0)='/dev/ppp\x00', 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102002700) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x9) 13:43:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 223.498738][ T9063] input: syz1 as /devices/virtual/input/input32 13:43:20 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) 13:43:20 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:20 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) r3 = memfd_create(&(0x7f00000000c0)='/dev/ppp\x00', 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102002700) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x9) [ 223.736809][ T9082] input: syz1 as /devices/virtual/input/input33 13:43:20 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) 13:43:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 223.933655][ T9097] input: syz1 as /devices/virtual/input/input34 13:43:23 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:23 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) 13:43:23 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) [ 226.582582][ T9108] input: syz1 as /devices/virtual/input/input35 13:43:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:23 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 226.813244][ T9130] input: syz1 as /devices/virtual/input/input38 13:43:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 226.925141][ T9141] input: syz1 as /devices/virtual/input/input40 13:43:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 227.010904][ T9145] input: syz1 as /devices/virtual/input/input41 [ 227.090381][ T9149] input: syz1 as /devices/virtual/input/input42 13:43:26 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:26 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) 13:43:26 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) [ 229.645098][ T9163] input: syz1 as /devices/virtual/input/input44 [ 229.667465][ T9160] input: syz1 as /devices/virtual/input/input43 13:43:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:26 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 229.820493][ T9175] input: syz1 as /devices/virtual/input/input45 13:43:26 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 229.889840][ T9181] input: syz1 as /devices/virtual/input/input46 13:43:26 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:26 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 230.048539][ T9195] input: syz1 as /devices/virtual/input/input47 13:43:29 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:29 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:29 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:29 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 232.758627][ T9214] input: syz1 as /devices/virtual/input/input49 13:43:29 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:29 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:29 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 233.023206][ T9244] input: syz1 as /devices/virtual/input/input51 13:43:32 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:32 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:32 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:32 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 235.877959][ T9268] input: syz1 as /devices/virtual/input/input54 13:43:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:32 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:32 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.138175][ T9289] input: syz1 as /devices/virtual/input/input56 13:43:32 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:32 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 236.340575][ T9309] input: syz1 as /devices/virtual/input/input58 13:43:35 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:35 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:35 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:35 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:35 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:35 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 13:43:35 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:35 executing program 3: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:35 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:35 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:35 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 13:43:38 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:38 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 13:43:38 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:38 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 13:43:38 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:43:38 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:38 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:38 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:38 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 242.313720][ T9403] input: syz1 as /devices/virtual/input/input60 [ 242.348999][ T9403] FAULT_INJECTION: forcing a failure. [ 242.348999][ T9403] name failslab, interval 1, probability 0, space 0, times 1 [ 242.365758][ T9403] CPU: 1 PID: 9403 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 242.373828][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.386977][ T9403] Call Trace: [ 242.392066][ T9403] dump_stack+0x172/0x1f0 [ 242.398737][ T9403] should_fail.cold+0xa/0x15 [ 242.404028][ T9403] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 242.411449][ T9403] ? ___might_sleep+0x163/0x280 [ 242.417221][ T9403] __should_failslab+0x121/0x190 [ 242.422971][ T9403] should_failslab+0x9/0x14 [ 242.427818][ T9403] __kmalloc_track_caller+0x2d8/0x740 [ 242.434168][ T9403] ? pointer+0xa30/0xa30 [ 242.438647][ T9403] ? __lock_acquire+0x548/0x3fb0 [ 242.443669][ T9403] ? kasprintf+0xbb/0xf0 [ 242.448202][ T9403] kvasprintf+0xc8/0x170 [ 242.453871][ T9403] ? bust_spinlocks+0xe0/0xe0 [ 242.459438][ T9403] ? debug_check_no_obj_freed+0x200/0x464 [ 242.465506][ T9403] kasprintf+0xbb/0xf0 [ 242.469619][ T9403] ? kvasprintf_const+0x190/0x190 [ 242.474773][ T9403] ? input_default_getkeycode+0x520/0x520 [ 242.480722][ T9403] input_devnode+0x4c/0x90 [ 242.485383][ T9403] device_get_devnode+0x175/0x2e0 [ 242.490486][ T9403] ? refcount_sub_and_test_checked+0x154/0x200 [ 242.496940][ T9403] devtmpfs_delete_node+0xaa/0x1a0 [ 242.502457][ T9403] ? devtmpfs_create_node+0x250/0x250 [ 242.508030][ T9403] ? __device_link_free_srcu+0x120/0x120 [ 242.514535][ T9403] ? refcount_dec_and_test_checked+0x1b/0x20 [ 242.521986][ T9403] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 242.528377][ T9403] ? kobject_put+0x84/0xe0 [ 242.532999][ T9403] ? __device_link_free_srcu+0x120/0x120 [ 242.538776][ T9403] ? klist_children_put+0x4a/0x60 [ 242.544044][ T9403] ? klist_put+0xdc/0x180 [ 242.548392][ T9403] device_del+0x8b4/0xc40 [ 242.552732][ T9403] ? __device_links_no_driver+0x250/0x250 [ 242.558524][ T9403] ? mark_held_locks+0xa4/0xf0 [ 242.563344][ T9403] ? _raw_spin_unlock_irq+0x28/0x90 [ 242.568586][ T9403] ? __input_unregister_device+0x153/0x4a0 [ 242.575257][ T9403] ? _raw_spin_unlock_irq+0x28/0x90 [ 242.581064][ T9403] cdev_device_del+0x1a/0x80 [ 242.586326][ T9403] evdev_disconnect+0x42/0xb0 [ 242.591531][ T9403] __input_unregister_device+0x200/0x4a0 [ 242.597623][ T9403] input_unregister_device+0xc5/0x110 [ 242.603264][ T9403] uinput_destroy_device+0x1f4/0x250 [ 242.608586][ T9403] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 242.614606][ T9403] ? tomoyo_domain+0xc5/0x160 [ 242.620060][ T9403] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 242.626162][ T9403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.632422][ T9403] ? tomoyo_path_number_perm+0x263/0x520 [ 242.638071][ T9403] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 242.645113][ T9403] ? ___might_sleep+0x163/0x280 [ 242.650452][ T9403] uinput_ioctl+0x4a/0x60 [ 242.654900][ T9403] ? uinput_compat_ioctl+0x90/0x90 [ 242.660078][ T9403] do_vfs_ioctl+0xd6e/0x1390 [ 242.665017][ T9403] ? ioctl_preallocate+0x210/0x210 [ 242.670229][ T9403] ? selinux_file_mprotect+0x620/0x620 [ 242.676304][ T9403] ? __fget+0x381/0x550 [ 242.680815][ T9403] ? ksys_dup3+0x3e0/0x3e0 [ 242.685319][ T9403] ? tomoyo_file_ioctl+0x23/0x30 [ 242.690260][ T9403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.696687][ T9403] ? security_file_ioctl+0x93/0xc0 [ 242.702067][ T9403] ksys_ioctl+0xab/0xd0 [ 242.706870][ T9403] __x64_sys_ioctl+0x73/0xb0 [ 242.711644][ T9403] do_syscall_64+0x103/0x610 [ 242.716472][ T9403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.722940][ T9403] RIP: 0033:0x4582f9 [ 242.727092][ T9403] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.748768][ T9403] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.757232][ T9403] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 13:43:39 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 242.765249][ T9403] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 242.773468][ T9403] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 242.781445][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 242.789691][ T9403] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:41 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:41 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:41 executing program 5: getpgrp(0x0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:43:41 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 245.125024][ T9429] input: syz1 as /devices/virtual/input/input61 [ 245.191918][ T9437] FAULT_INJECTION: forcing a failure. [ 245.191918][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 245.205192][ T9437] CPU: 1 PID: 9437 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 245.213096][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.223148][ T9437] Call Trace: [ 245.226438][ T9437] dump_stack+0x172/0x1f0 [ 245.230768][ T9437] should_fail.cold+0xa/0x15 [ 245.235350][ T9437] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.241152][ T9437] ? ___might_sleep+0x163/0x280 [ 245.256834][ T9437] __should_failslab+0x121/0x190 [ 245.261825][ T9437] should_failslab+0x9/0x14 [ 245.266359][ T9437] kmem_cache_alloc_trace+0x2d1/0x760 [ 245.271744][ T9437] ? mutex_trylock+0x1e0/0x1e0 [ 245.276527][ T9437] ? kasan_check_write+0x14/0x20 [ 245.281473][ T9437] kobject_uevent_env+0x2fb/0x1030 [ 245.286585][ T9437] ? wait_for_completion+0x440/0x440 [ 245.291900][ T9437] kobject_uevent+0x20/0x26 [ 245.296420][ T9437] device_del+0x758/0xc40 [ 245.300775][ T9437] ? __device_links_no_driver+0x250/0x250 [ 245.306526][ T9437] ? _raw_spin_unlock_irq+0x28/0x90 [ 245.311728][ T9437] ? __input_unregister_device+0x153/0x4a0 [ 245.317535][ T9437] ? _raw_spin_unlock_irq+0x28/0x90 [ 245.322736][ T9437] cdev_device_del+0x1a/0x80 [ 245.327327][ T9437] evdev_disconnect+0x42/0xb0 [ 245.331991][ T9437] __input_unregister_device+0x200/0x4a0 [ 245.337712][ T9437] input_unregister_device+0xc5/0x110 [ 245.343101][ T9437] uinput_destroy_device+0x1f4/0x250 [ 245.348480][ T9437] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 245.354449][ T9437] ? tomoyo_domain+0xc5/0x160 [ 245.359128][ T9437] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 245.365217][ T9437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.371464][ T9437] ? tomoyo_path_number_perm+0x263/0x520 [ 245.377124][ T9437] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 245.382955][ T9437] ? ___might_sleep+0x163/0x280 [ 245.387803][ T9437] uinput_ioctl+0x4a/0x60 [ 245.392143][ T9437] ? uinput_compat_ioctl+0x90/0x90 [ 245.397256][ T9437] do_vfs_ioctl+0xd6e/0x1390 [ 245.401856][ T9437] ? ioctl_preallocate+0x210/0x210 [ 245.406965][ T9437] ? selinux_file_mprotect+0x620/0x620 [ 245.412498][ T9437] ? __fget+0x381/0x550 [ 245.416659][ T9437] ? ksys_dup3+0x3e0/0x3e0 [ 245.421099][ T9437] ? tomoyo_file_ioctl+0x23/0x30 [ 245.426035][ T9437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.432268][ T9437] ? security_file_ioctl+0x93/0xc0 [ 245.437387][ T9437] ksys_ioctl+0xab/0xd0 [ 245.441558][ T9437] __x64_sys_ioctl+0x73/0xb0 [ 245.447732][ T9437] do_syscall_64+0x103/0x610 [ 245.452354][ T9437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.458254][ T9437] RIP: 0033:0x4582f9 [ 245.462145][ T9437] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.482148][ T9437] RSP: 002b:00007fad5eebac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:43:42 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:42 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 245.490556][ T9437] RAX: ffffffffffffffda RBX: 00007fad5eebac90 RCX: 00000000004582f9 [ 245.498531][ T9437] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 245.506516][ T9437] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 245.514499][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eebb6d4 [ 245.522465][ T9437] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:42 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 245.676837][ T9451] input: syz1 as /devices/virtual/input/input63 [ 245.690982][ T9451] FAULT_INJECTION: forcing a failure. [ 245.690982][ T9451] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 245.704275][ T9451] CPU: 1 PID: 9451 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 245.712287][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.712313][ T9451] Call Trace: [ 245.712345][ T9451] dump_stack+0x172/0x1f0 [ 245.712369][ T9451] should_fail.cold+0xa/0x15 [ 245.712391][ T9451] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.712409][ T9451] ? __lock_acquire+0x548/0x3fb0 [ 245.712479][ T9451] ? trace_hardirqs_on+0x67/0x230 [ 245.712532][ T9451] should_fail_alloc_page+0x50/0x60 [ 245.712560][ T9451] __alloc_pages_nodemask+0x1a1/0x7e0 [ 245.732552][ T9451] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 245.732577][ T9451] ? find_held_lock+0x35/0x130 [ 245.743100][ T9451] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.743124][ T9451] cache_grow_begin+0x9c/0x860 [ 245.743141][ T9451] ? kobject_uevent_env+0x2fb/0x1030 [ 245.743165][ T9451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 245.796553][ T9451] kmem_cache_alloc_trace+0x67f/0x760 [ 245.802217][ T9451] ? mutex_trylock+0x1e0/0x1e0 [ 245.806987][ T9451] ? kasan_check_write+0x14/0x20 [ 245.811946][ T9451] kobject_uevent_env+0x2fb/0x1030 [ 245.817086][ T9451] ? wait_for_completion+0x440/0x440 [ 245.822398][ T9451] kobject_uevent+0x20/0x26 [ 245.827242][ T9451] device_del+0x758/0xc40 [ 245.831684][ T9451] ? __device_links_no_driver+0x250/0x250 [ 245.837409][ T9451] ? _raw_spin_unlock_irq+0x28/0x90 [ 245.842609][ T9451] ? __input_unregister_device+0x153/0x4a0 [ 245.848500][ T9451] ? _raw_spin_unlock_irq+0x28/0x90 [ 245.853822][ T9451] cdev_device_del+0x1a/0x80 [ 245.858425][ T9451] evdev_disconnect+0x42/0xb0 [ 245.863219][ T9451] __input_unregister_device+0x200/0x4a0 [ 245.868848][ T9451] input_unregister_device+0xc5/0x110 [ 245.874226][ T9451] uinput_destroy_device+0x1f4/0x250 [ 245.879520][ T9451] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 245.885426][ T9451] ? tomoyo_domain+0xc5/0x160 [ 245.890096][ T9451] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 245.896183][ T9451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.902428][ T9451] ? tomoyo_path_number_perm+0x263/0x520 [ 245.908066][ T9451] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 245.913886][ T9451] ? ___might_sleep+0x163/0x280 [ 245.918743][ T9451] uinput_ioctl+0x4a/0x60 [ 245.923088][ T9451] ? uinput_compat_ioctl+0x90/0x90 [ 245.928201][ T9451] do_vfs_ioctl+0xd6e/0x1390 [ 245.932794][ T9451] ? ioctl_preallocate+0x210/0x210 [ 245.938517][ T9451] ? selinux_file_mprotect+0x620/0x620 [ 245.944065][ T9451] ? __fget+0x381/0x550 [ 245.948225][ T9451] ? ksys_dup3+0x3e0/0x3e0 [ 245.952641][ T9451] ? tomoyo_file_ioctl+0x23/0x30 [ 245.957576][ T9451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.963995][ T9451] ? security_file_ioctl+0x93/0xc0 [ 245.969135][ T9451] ksys_ioctl+0xab/0xd0 [ 245.973300][ T9451] __x64_sys_ioctl+0x73/0xb0 [ 245.977899][ T9451] do_syscall_64+0x103/0x610 [ 245.982490][ T9451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.988376][ T9451] RIP: 0033:0x4582f9 [ 245.992269][ T9451] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 246.011951][ T9451] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.020360][ T9451] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 13:43:42 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 246.028334][ T9451] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 246.036422][ T9451] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 246.044563][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 246.052527][ T9451] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:42 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:44 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:44 executing program 3 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:44 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:44 executing program 5: clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 248.203413][ T9479] input: syz1 as /devices/virtual/input/input65 [ 248.231117][ T9479] FAULT_INJECTION: forcing a failure. [ 248.231117][ T9479] name failslab, interval 1, probability 0, space 0, times 0 [ 248.276330][ T9479] CPU: 0 PID: 9479 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 248.284855][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.295100][ T9479] Call Trace: [ 248.298463][ T9479] dump_stack+0x172/0x1f0 [ 248.302909][ T9479] should_fail.cold+0xa/0x15 [ 248.308302][ T9479] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 248.314314][ T9479] ? ___might_sleep+0x163/0x280 [ 248.319574][ T9479] __should_failslab+0x121/0x190 [ 248.324542][ T9479] should_failslab+0x9/0x14 [ 248.331283][ T9479] __kmalloc+0x2dc/0x740 [ 248.335530][ T9479] ? kobject_uevent_env+0x2fb/0x1030 [ 248.340998][ T9479] ? rcu_read_lock_sched_held+0x110/0x130 [ 248.346916][ T9479] ? kobject_get_path+0xc4/0x1b0 [ 248.351858][ T9479] kobject_get_path+0xc4/0x1b0 [ 248.356639][ T9479] kobject_uevent_env+0x31f/0x1030 [ 248.361879][ T9479] ? wait_for_completion+0x440/0x440 [ 248.369282][ T9479] kobject_uevent+0x20/0x26 [ 248.373821][ T9479] device_del+0x758/0xc40 [ 248.378487][ T9479] ? __device_links_no_driver+0x250/0x250 [ 248.384306][ T9479] ? _raw_spin_unlock_irq+0x28/0x90 [ 248.389677][ T9479] ? __input_unregister_device+0x153/0x4a0 [ 248.395565][ T9479] ? _raw_spin_unlock_irq+0x28/0x90 [ 248.400975][ T9479] cdev_device_del+0x1a/0x80 [ 248.406701][ T9479] evdev_disconnect+0x42/0xb0 [ 248.411386][ T9479] __input_unregister_device+0x200/0x4a0 [ 248.417048][ T9479] input_unregister_device+0xc5/0x110 [ 248.422604][ T9479] uinput_destroy_device+0x1f4/0x250 [ 248.428041][ T9479] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 248.433923][ T9479] ? tomoyo_domain+0xc5/0x160 [ 248.438589][ T9479] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 248.444943][ T9479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.452328][ T9479] ? tomoyo_path_number_perm+0x263/0x520 [ 248.458595][ T9479] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 248.464514][ T9479] ? ___might_sleep+0x163/0x280 [ 248.469365][ T9479] uinput_ioctl+0x4a/0x60 [ 248.473789][ T9479] ? uinput_compat_ioctl+0x90/0x90 [ 248.478911][ T9479] do_vfs_ioctl+0xd6e/0x1390 [ 248.483506][ T9479] ? ioctl_preallocate+0x210/0x210 [ 248.488658][ T9479] ? selinux_file_mprotect+0x620/0x620 [ 248.494110][ T9479] ? __fget+0x381/0x550 [ 248.498262][ T9479] ? ksys_dup3+0x3e0/0x3e0 [ 248.502674][ T9479] ? tomoyo_file_ioctl+0x23/0x30 [ 248.508022][ T9479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.514355][ T9479] ? security_file_ioctl+0x93/0xc0 [ 248.519500][ T9479] ksys_ioctl+0xab/0xd0 [ 248.523676][ T9479] __x64_sys_ioctl+0x73/0xb0 [ 248.528642][ T9479] do_syscall_64+0x103/0x610 [ 248.533258][ T9479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.539145][ T9479] RIP: 0033:0x4582f9 [ 248.543038][ T9479] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.562673][ T9479] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:43:45 executing program 5: clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:43:45 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:45 executing program 0: unshare(0x8000000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 248.571184][ T9479] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 [ 248.579434][ T9479] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 248.587522][ T9479] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 248.595513][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 248.603662][ T9479] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:45 executing program 3 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:45 executing program 0: unshare(0x8000000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 248.808127][ T9508] input: syz1 as /devices/virtual/input/input68 [ 248.903962][ T9508] FAULT_INJECTION: forcing a failure. [ 248.903962][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 248.927853][ T9508] CPU: 1 PID: 9508 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 248.936260][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.946682][ T9508] Call Trace: [ 248.949993][ T9508] dump_stack+0x172/0x1f0 [ 248.954338][ T9508] should_fail.cold+0xa/0x15 [ 248.958925][ T9508] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 248.964739][ T9508] ? ___might_sleep+0x163/0x280 [ 248.969577][ T9508] __should_failslab+0x121/0x190 [ 248.974627][ T9508] should_failslab+0x9/0x14 [ 248.979142][ T9508] kmem_cache_alloc_node+0x264/0x710 [ 248.984448][ T9508] ? find_held_lock+0x35/0x130 [ 248.989436][ T9508] __alloc_skb+0xd5/0x5e0 [ 248.993803][ T9508] ? skb_trim+0x190/0x190 [ 248.998142][ T9508] ? kasan_check_read+0x11/0x20 [ 249.002984][ T9508] alloc_uevent_skb+0x83/0x1e2 [ 249.007771][ T9508] kobject_uevent_env+0xa63/0x1030 [ 249.012885][ T9508] ? wait_for_completion+0x440/0x440 [ 249.018327][ T9508] kobject_uevent+0x20/0x26 [ 249.022841][ T9508] device_del+0x758/0xc40 [ 249.027186][ T9508] ? __device_links_no_driver+0x250/0x250 [ 249.032925][ T9508] ? _raw_spin_unlock_irq+0x28/0x90 [ 249.038849][ T9508] ? __input_unregister_device+0x153/0x4a0 [ 249.044985][ T9508] ? _raw_spin_unlock_irq+0x28/0x90 [ 249.050179][ T9508] cdev_device_del+0x1a/0x80 [ 249.054759][ T9508] evdev_disconnect+0x42/0xb0 [ 249.059461][ T9508] __input_unregister_device+0x200/0x4a0 [ 249.065268][ T9508] input_unregister_device+0xc5/0x110 [ 249.070659][ T9508] uinput_destroy_device+0x1f4/0x250 [ 249.076118][ T9508] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 249.082012][ T9508] ? tomoyo_domain+0xc5/0x160 [ 249.086862][ T9508] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 249.093490][ T9508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.099753][ T9508] ? tomoyo_path_number_perm+0x263/0x520 [ 249.105407][ T9508] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 249.111227][ T9508] ? ___might_sleep+0x163/0x280 [ 249.116168][ T9508] uinput_ioctl+0x4a/0x60 [ 249.120841][ T9508] ? uinput_compat_ioctl+0x90/0x90 [ 249.125984][ T9508] do_vfs_ioctl+0xd6e/0x1390 [ 249.130993][ T9508] ? ioctl_preallocate+0x210/0x210 [ 249.136359][ T9508] ? selinux_file_mprotect+0x620/0x620 [ 249.142197][ T9508] ? __fget+0x381/0x550 [ 249.146494][ T9508] ? ksys_dup3+0x3e0/0x3e0 [ 249.150928][ T9508] ? tomoyo_file_ioctl+0x23/0x30 [ 249.156405][ T9508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.162644][ T9508] ? security_file_ioctl+0x93/0xc0 [ 249.167860][ T9508] ksys_ioctl+0xab/0xd0 [ 249.172398][ T9508] __x64_sys_ioctl+0x73/0xb0 [ 249.176982][ T9508] do_syscall_64+0x103/0x610 [ 249.181568][ T9508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.187761][ T9508] RIP: 0033:0x4582f9 [ 249.191676][ T9508] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.211604][ T9508] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.223753][ T9508] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 [ 249.231998][ T9508] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 249.239980][ T9508] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.257867][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 249.267530][ T9508] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:47 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:47 executing program 0: unshare(0x8000000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:47 executing program 3 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 251.307480][ T9529] input: syz1 as /devices/virtual/input/input71 [ 251.357226][ T9529] FAULT_INJECTION: forcing a failure. [ 251.357226][ T9529] name failslab, interval 1, probability 0, space 0, times 0 [ 251.382290][ T9529] CPU: 0 PID: 9529 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 251.400458][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.411503][ T9529] Call Trace: [ 251.414977][ T9529] dump_stack+0x172/0x1f0 [ 251.419487][ T9529] should_fail.cold+0xa/0x15 [ 251.424256][ T9529] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 251.430441][ T9529] ? ___might_sleep+0x163/0x280 [ 251.435942][ T9529] __should_failslab+0x121/0x190 [ 251.442278][ T9529] should_failslab+0x9/0x14 [ 251.449801][ T9529] kmem_cache_alloc_node_trace+0x270/0x720 [ 251.455636][ T9529] __kmalloc_node_track_caller+0x3d/0x70 [ 251.461557][ T9529] __kmalloc_reserve.isra.0+0x40/0xf0 [ 251.467151][ T9529] __alloc_skb+0x10b/0x5e0 [ 251.476184][ T9529] ? skb_trim+0x190/0x190 [ 251.482535][ T9529] ? kasan_check_read+0x11/0x20 [ 251.488196][ T9529] alloc_uevent_skb+0x83/0x1e2 [ 251.493306][ T9529] kobject_uevent_env+0xa63/0x1030 [ 251.498523][ T9529] ? wait_for_completion+0x440/0x440 [ 251.503898][ T9529] kobject_uevent+0x20/0x26 [ 251.508436][ T9529] device_del+0x758/0xc40 [ 251.512794][ T9529] ? __device_links_no_driver+0x250/0x250 [ 251.518806][ T9529] ? _raw_spin_unlock_irq+0x28/0x90 [ 251.524405][ T9529] ? __input_unregister_device+0x153/0x4a0 [ 251.531093][ T9529] ? _raw_spin_unlock_irq+0x28/0x90 [ 251.537749][ T9529] cdev_device_del+0x1a/0x80 [ 251.548723][ T9529] evdev_disconnect+0x42/0xb0 [ 251.559717][ T9529] __input_unregister_device+0x200/0x4a0 [ 251.568155][ T9529] input_unregister_device+0xc5/0x110 [ 251.585860][ T9529] uinput_destroy_device+0x1f4/0x250 [ 251.592408][ T9529] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 251.600138][ T9529] ? tomoyo_domain+0xc5/0x160 [ 251.605100][ T9529] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 251.612509][ T9529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.618837][ T9529] ? tomoyo_path_number_perm+0x263/0x520 [ 251.624555][ T9529] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 251.634769][ T9529] ? ___might_sleep+0x163/0x280 [ 251.649793][ T9529] uinput_ioctl+0x4a/0x60 [ 251.656758][ T9529] ? uinput_compat_ioctl+0x90/0x90 [ 251.663467][ T9529] do_vfs_ioctl+0xd6e/0x1390 [ 251.668235][ T9529] ? ioctl_preallocate+0x210/0x210 [ 251.678330][ T9529] ? selinux_file_mprotect+0x620/0x620 [ 251.683997][ T9529] ? __fget+0x381/0x550 [ 251.688348][ T9529] ? ksys_dup3+0x3e0/0x3e0 [ 251.692793][ T9529] ? tomoyo_file_ioctl+0x23/0x30 [ 251.698015][ T9529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.705085][ T9529] ? security_file_ioctl+0x93/0xc0 [ 251.710429][ T9529] ksys_ioctl+0xab/0xd0 [ 251.714594][ T9529] __x64_sys_ioctl+0x73/0xb0 [ 251.719293][ T9529] do_syscall_64+0x103/0x610 [ 251.730805][ T9529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.738836][ T9529] RIP: 0033:0x4582f9 [ 251.743025][ T9529] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.772331][ T9529] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.780825][ T9529] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 [ 251.790400][ T9529] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 251.798972][ T9529] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:43:48 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:43:48 executing program 0: r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 251.807348][ T9529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 251.815551][ T9529] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:48 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:48 executing program 3 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:48 executing program 0: r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:48 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 252.034765][ T9556] input: syz1 as /devices/virtual/input/input73 [ 252.078384][ T9556] FAULT_INJECTION: forcing a failure. [ 252.078384][ T9556] name failslab, interval 1, probability 0, space 0, times 0 [ 252.111910][ T9556] CPU: 1 PID: 9556 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 13:43:48 executing program 0: r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 252.123354][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.140317][ T9556] Call Trace: [ 252.143901][ T9556] dump_stack+0x172/0x1f0 [ 252.162541][ T9556] should_fail.cold+0xa/0x15 [ 252.162647][ T9556] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 252.162666][ T9556] ? ___might_sleep+0x163/0x280 [ 252.178051][ T9556] __should_failslab+0x121/0x190 [ 252.178069][ T9556] should_failslab+0x9/0x14 [ 252.178087][ T9556] kmem_cache_alloc_node_trace+0x270/0x720 [ 252.178114][ T9556] __kmalloc_node_track_caller+0x3d/0x70 [ 252.178133][ T9556] __kmalloc_reserve.isra.0+0x40/0xf0 [ 252.178153][ T9556] __alloc_skb+0x10b/0x5e0 [ 252.208771][ T9556] ? skb_trim+0x190/0x190 [ 252.213125][ T9556] ? kasan_check_read+0x11/0x20 [ 252.217993][ T9556] alloc_uevent_skb+0x83/0x1e2 [ 252.222840][ T9556] kobject_uevent_env+0xa63/0x1030 [ 252.227956][ T9556] ? wait_for_completion+0x440/0x440 [ 252.233375][ T9556] kobject_uevent+0x20/0x26 [ 252.237994][ T9556] device_del+0x758/0xc40 [ 252.242348][ T9556] ? __device_links_no_driver+0x250/0x250 [ 252.248102][ T9556] ? _raw_spin_unlock_irq+0x28/0x90 [ 252.253314][ T9556] ? __input_unregister_device+0x153/0x4a0 [ 252.259129][ T9556] ? _raw_spin_unlock_irq+0x28/0x90 [ 252.264318][ T9556] cdev_device_del+0x1a/0x80 [ 252.268901][ T9556] evdev_disconnect+0x42/0xb0 [ 252.273565][ T9556] __input_unregister_device+0x200/0x4a0 [ 252.279187][ T9556] input_unregister_device+0xc5/0x110 [ 252.284548][ T9556] uinput_destroy_device+0x1f4/0x250 [ 252.289907][ T9556] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 252.295785][ T9556] ? tomoyo_domain+0xc5/0x160 [ 252.300479][ T9556] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 252.306555][ T9556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.312783][ T9556] ? tomoyo_path_number_perm+0x263/0x520 [ 252.318429][ T9556] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 252.324237][ T9556] ? ___might_sleep+0x163/0x280 [ 252.329097][ T9556] uinput_ioctl+0x4a/0x60 [ 252.336886][ T9556] ? uinput_compat_ioctl+0x90/0x90 [ 252.341985][ T9556] do_vfs_ioctl+0xd6e/0x1390 [ 252.346569][ T9556] ? ioctl_preallocate+0x210/0x210 [ 252.351667][ T9556] ? selinux_file_mprotect+0x620/0x620 [ 252.357117][ T9556] ? __fget+0x381/0x550 [ 252.361808][ T9556] ? ksys_dup3+0x3e0/0x3e0 [ 252.366240][ T9556] ? tomoyo_file_ioctl+0x23/0x30 [ 252.371290][ T9556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.377519][ T9556] ? security_file_ioctl+0x93/0xc0 [ 252.384668][ T9556] ksys_ioctl+0xab/0xd0 [ 252.388811][ T9556] __x64_sys_ioctl+0x73/0xb0 [ 252.393391][ T9556] do_syscall_64+0x103/0x610 [ 252.397975][ T9556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.403942][ T9556] RIP: 0033:0x4582f9 [ 252.407847][ T9556] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.428070][ T9556] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.436564][ T9556] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 [ 252.444533][ T9556] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 252.452502][ T9556] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.460465][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 252.468445][ T9556] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 13:43:50 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x1000000000016) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:50 executing program 0: unshare(0x0) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) 13:43:50 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="fa79c2201f276a9d9980c50e12f8ed68e8be9c7993304290edffee9ec78dfd3a14b07eb38b8029de85380807000000d998f13ca2778b3393f7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:43:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:43:50 executing program 3 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 254.402741][ T9584] input: syz1 as /devices/virtual/input/input75 13:43:51 executing program 0: unshare(0x0) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0x27d, 0x0, 0x0) [ 254.497729][ T9584] FAULT_INJECTION: forcing a failure. [ 254.497729][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 254.550645][ T9584] CPU: 1 PID: 9584 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 254.558589][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.568659][ T9584] Call Trace: [ 254.571990][ T9584] dump_stack+0x172/0x1f0 [ 254.576363][ T9584] should_fail.cold+0xa/0x15 [ 254.580990][ T9584] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 254.586950][ T9584] ? ___might_sleep+0x163/0x280 [ 254.591829][ T9584] __should_failslab+0x121/0x190 [ 254.596804][ T9584] should_failslab+0x9/0x14 [ 254.601337][ T9584] kmem_cache_alloc_trace+0x2d1/0x760 [ 254.606801][ T9584] ? kasan_check_write+0x14/0x20 [ 254.611743][ T9584] kobject_uevent_env+0x2fb/0x1030 [ 254.616915][ T9584] ? wait_for_completion+0x440/0x440 [ 254.622347][ T9584] kobject_uevent+0x20/0x26 [ 254.626846][ T9584] device_del+0x758/0xc40 [ 254.631623][ T9584] ? __device_links_no_driver+0x250/0x250 [ 254.637611][ T9584] ? trace_hardirqs_on+0x67/0x230 [ 254.644510][ T9584] __input_unregister_device+0x3a4/0x4a0 [ 254.650295][ T9584] input_unregister_device+0xc5/0x110 [ 254.655751][ T9584] uinput_destroy_device+0x1f4/0x250 [ 254.661060][ T9584] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 254.666949][ T9584] ? tomoyo_domain+0xc5/0x160 [ 254.671619][ T9584] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 254.677687][ T9584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.683953][ T9584] ? tomoyo_path_number_perm+0x263/0x520 [ 254.689575][ T9584] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 254.695402][ T9584] ? ___might_sleep+0x163/0x280 [ 254.700277][ T9584] uinput_ioctl+0x4a/0x60 [ 254.704623][ T9584] ? uinput_compat_ioctl+0x90/0x90 [ 254.709817][ T9584] do_vfs_ioctl+0xd6e/0x1390 [ 254.714423][ T9584] ? ioctl_preallocate+0x210/0x210 [ 254.719545][ T9584] ? selinux_file_mprotect+0x620/0x620 [ 254.725040][ T9584] ? __fget+0x381/0x550 [ 254.729227][ T9584] ? ksys_dup3+0x3e0/0x3e0 [ 254.733640][ T9584] ? tomoyo_file_ioctl+0x23/0x30 [ 254.738678][ T9584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.744997][ T9584] ? security_file_ioctl+0x93/0xc0 [ 254.750118][ T9584] ksys_ioctl+0xab/0xd0 [ 254.754311][ T9584] __x64_sys_ioctl+0x73/0xb0 [ 254.759170][ T9584] do_syscall_64+0x103/0x610 [ 254.763780][ T9584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.769677][ T9584] RIP: 0033:0x4582f9 [ 254.773556][ T9584] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.793602][ T9584] RSP: 002b:00007fad5eedbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.802107][ T9584] RAX: ffffffffffffffda RBX: 00007fad5eedbc90 RCX: 00000000004582f9 [ 254.810088][ T9584] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 254.818138][ T9584] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 254.826195][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad5eedc6d4 [ 254.834166][ T9584] R13: 00000000004c2957 R14: 00000000004d57a8 R15: 0000000000000005 [ 254.887398][ T9575] ================================================================== [ 254.895748][ T9575] BUG: KASAN: use-after-free in string+0x208/0x230 [ 254.902264][ T9575] Read of size 1 at addr ffff88808f231cc0 by task syz-executor.3/9575 [ 254.910441][ T9575] [ 254.913478][ T9575] CPU: 1 PID: 9575 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #61 [ 254.921444][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.931506][ T9575] Call Trace: [ 254.934790][ T9575] dump_stack+0x172/0x1f0 [ 254.939306][ T9575] ? string+0x208/0x230 [ 254.943476][ T9575] print_address_description.cold+0x7c/0x20d [ 254.949443][ T9575] ? string+0x208/0x230 [ 254.953585][ T9575] ? string+0x208/0x230 [ 254.957742][ T9575] kasan_report.cold+0x1b/0x40 [ 254.962713][ T9575] ? string+0x208/0x230 [ 254.966908][ T9575] __asan_report_load1_noabort+0x14/0x20 [ 254.972624][ T9575] string+0x208/0x230 [ 254.976594][ T9575] ? widen_string+0x2e0/0x2e0 [ 254.981334][ T9575] ? console_unlock+0x6a7/0xeb0 [ 254.986209][ T9575] ? find_held_lock+0x35/0x130 [ 254.990998][ T9575] vsnprintf+0xbfc/0x1af0 [ 254.995329][ T9575] ? pointer+0xa30/0xa30 [ 254.999571][ T9575] ? string+0x1cc/0x230 [ 255.003758][ T9575] add_uevent_var+0x14d/0x310 [ 255.009729][ T9575] ? cleanup_uevent_env+0x50/0x50 [ 255.014742][ T9575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 255.021006][ T9575] ? input_dev_uevent+0x110/0x890 [ 255.026053][ T9575] input_dev_uevent+0x163/0x890 [ 255.030910][ T9575] ? input_add_uevent_bm_var+0x150/0x150 [ 255.036560][ T9575] dev_uevent+0x312/0x580 [ 255.040900][ T9575] ? device_get_devnode+0x2e0/0x2e0 [ 255.046350][ T9575] ? kobject_uevent_env+0x2fb/0x1030 [ 255.051646][ T9575] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.057357][ T9575] ? kobject_uevent_env+0x37d/0x1030 [ 255.062978][ T9575] ? device_get_devnode+0x2e0/0x2e0 [ 255.068167][ T9575] kobject_uevent_env+0x487/0x1030 [ 255.073283][ T9575] ? release_nodes+0x548/0x9c0 [ 255.078060][ T9575] kobject_uevent+0x20/0x26 [ 255.082549][ T9575] kobject_put.cold+0x177/0x2ec [ 255.087402][ T9575] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 255.093395][ T9575] put_device+0x20/0x30 [ 255.097546][ T9575] evdev_free+0x51/0x70 [ 255.101691][ T9575] device_release+0x7d/0x210 [ 255.106302][ T9575] kobject_put.cold+0x28f/0x2ec [ 255.111143][ T9575] cdev_default_release+0x41/0x50 [ 255.116153][ T9575] kobject_put.cold+0x28f/0x2ec [ 255.121003][ T9575] cdev_put.part.0+0x39/0x50 [ 255.125622][ T9575] cdev_put+0x20/0x30 [ 255.129591][ T9575] __fput+0x6df/0x8d0 [ 255.133557][ T9575] ____fput+0x16/0x20 [ 255.137602][ T9575] task_work_run+0x14a/0x1c0 [ 255.142235][ T9575] exit_to_usermode_loop+0x273/0x2c0 [ 255.147632][ T9575] do_syscall_64+0x52d/0x610 [ 255.152236][ T9575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.158123][ T9575] RIP: 0033:0x4120b1 [ 255.162012][ T9575] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 255.182301][ T9575] RSP: 002b:00007fff49861e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 255.190853][ T9575] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004120b1 [ 255.199079][ T9575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 255.207154][ T9575] RBP: 000000000073c900 R08: 00000000a6739d89 R09: 00000000a6739d8d [ 255.215272][ T9575] R10: 00007fff49861ed0 R11: 0000000000000293 R12: 000000000073c900 [ 255.223235][ T9575] R13: 000000000003e1d0 R14: 00000000000003e8 R15: 000000000073bf0c [ 255.231448][ T9575] [ 255.233775][ T9575] Allocated by task 9584: [ 255.238111][ T9575] save_stack+0x45/0xd0 [ 255.242351][ T9575] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 255.254841][ T9575] kasan_kmalloc+0x9/0x10 [ 255.259962][ T9575] __kmalloc_track_caller+0x158/0x740 [ 255.266909][ T9575] kstrndup+0x5f/0xf0 [ 255.270911][ T9575] uinput_dev_setup+0x1d4/0x310 [ 255.275830][ T9575] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 255.282074][ T9575] uinput_ioctl+0x4a/0x60 [ 255.286394][ T9575] do_vfs_ioctl+0xd6e/0x1390 [ 255.291429][ T9575] ksys_ioctl+0xab/0xd0 [ 255.295567][ T9575] __x64_sys_ioctl+0x73/0xb0 [ 255.300257][ T9575] do_syscall_64+0x103/0x610 [ 255.304833][ T9575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.310911][ T9575] [ 255.313244][ T9575] Freed by task 9584: [ 255.317217][ T9575] save_stack+0x45/0xd0 [ 255.321371][ T9575] __kasan_slab_free+0x102/0x150 [ 255.326309][ T9575] kasan_slab_free+0xe/0x10 [ 255.330808][ T9575] kfree+0xcf/0x230 [ 255.334609][ T9575] uinput_destroy_device+0xf8/0x250 [ 255.339902][ T9575] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 255.345785][ T9575] uinput_ioctl+0x4a/0x60 [ 255.350101][ T9575] do_vfs_ioctl+0xd6e/0x1390 [ 255.354676][ T9575] ksys_ioctl+0xab/0xd0 [ 255.358830][ T9575] __x64_sys_ioctl+0x73/0xb0 [ 255.363417][ T9575] do_syscall_64+0x103/0x610 [ 255.368032][ T9575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.373925][ T9575] [ 255.376244][ T9575] The buggy address belongs to the object at ffff88808f231cc0 [ 255.376244][ T9575] which belongs to the cache kmalloc-32 of size 32 [ 255.390236][ T9575] The buggy address is located 0 bytes inside of [ 255.390236][ T9575] 32-byte region [ffff88808f231cc0, ffff88808f231ce0) [ 255.403267][ T9575] The buggy address belongs to the page: [ 255.408903][ T9575] page:ffffea00023c8c40 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff88808f231fc1 [ 255.419041][ T9575] flags: 0x1fffc0000000200(slab) [ 255.424011][ T9575] raw: 01fffc0000000200 ffffea00029ed708 ffffea0002a0f888 ffff88812c3f01c0 [ 255.432593][ T9575] raw: ffff88808f231fc1 ffff88808f231000 000000010000003f 0000000000000000 [ 255.441264][ T9575] page dumped because: kasan: bad access detected [ 255.447779][ T9575] [ 255.450093][ T9575] Memory state around the buggy address: [ 255.455712][ T9575] ffff88808f231b80: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 255.463776][ T9575] ffff88808f231c00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 255.472156][ T9575] >ffff88808f231c80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 255.480299][ T9575] ^ [ 255.486545][ T9575] ffff88808f231d00: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 255.494601][ T9575] ffff88808f231d80: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc [ 255.502646][ T9575] ================================================================== [ 255.510712][ T9575] Disabling lock debugging due to kernel taint [ 255.517987][ T9575] Kernel panic - not syncing: panic_on_warn set ... [ 255.524627][ T9575] CPU: 1 PID: 9575 Comm: syz-executor.3 Tainted: G B 5.1.0-rc4+ #61 [ 255.533901][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.547059][ T9575] Call Trace: [ 255.550337][ T9575] dump_stack+0x172/0x1f0 [ 255.554715][ T9575] panic+0x2cb/0x65c [ 255.558612][ T9575] ? __warn_printk+0xf3/0xf3 [ 255.563229][ T9575] ? string+0x208/0x230 [ 255.567373][ T9575] ? preempt_schedule+0x4b/0x60 [ 255.572218][ T9575] ? ___preempt_schedule+0x16/0x18 [ 255.577838][ T9575] ? trace_hardirqs_on+0x5e/0x230 [ 255.582869][ T9575] ? string+0x208/0x230 [ 255.587086][ T9575] end_report+0x47/0x4f [ 255.591222][ T9575] ? string+0x208/0x230 [ 255.595368][ T9575] kasan_report.cold+0xe/0x40 [ 255.600044][ T9575] ? string+0x208/0x230 [ 255.604195][ T9575] __asan_report_load1_noabort+0x14/0x20 [ 255.609820][ T9575] string+0x208/0x230 [ 255.613805][ T9575] ? widen_string+0x2e0/0x2e0 [ 255.618484][ T9575] ? console_unlock+0x6a7/0xeb0 [ 255.623327][ T9575] ? find_held_lock+0x35/0x130 [ 255.628079][ T9575] vsnprintf+0xbfc/0x1af0 [ 255.632960][ T9575] ? pointer+0xa30/0xa30 [ 255.637305][ T9575] ? string+0x1cc/0x230 [ 255.641465][ T9575] add_uevent_var+0x14d/0x310 [ 255.646163][ T9575] ? cleanup_uevent_env+0x50/0x50 [ 255.651210][ T9575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 255.657450][ T9575] ? input_dev_uevent+0x110/0x890 [ 255.662471][ T9575] input_dev_uevent+0x163/0x890 [ 255.667405][ T9575] ? input_add_uevent_bm_var+0x150/0x150 [ 255.673028][ T9575] dev_uevent+0x312/0x580 [ 255.677368][ T9575] ? device_get_devnode+0x2e0/0x2e0 [ 255.684832][ T9575] ? kobject_uevent_env+0x2fb/0x1030 [ 255.690503][ T9575] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.696311][ T9575] ? kobject_uevent_env+0x37d/0x1030 [ 255.701595][ T9575] ? device_get_devnode+0x2e0/0x2e0 [ 255.706802][ T9575] kobject_uevent_env+0x487/0x1030 [ 255.711916][ T9575] ? release_nodes+0x548/0x9c0 [ 255.716761][ T9575] kobject_uevent+0x20/0x26 [ 255.721377][ T9575] kobject_put.cold+0x177/0x2ec [ 255.726297][ T9575] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 255.732444][ T9575] put_device+0x20/0x30 [ 255.737824][ T9575] evdev_free+0x51/0x70 [ 255.742086][ T9575] device_release+0x7d/0x210 [ 255.747969][ T9575] kobject_put.cold+0x28f/0x2ec [ 255.752983][ T9575] cdev_default_release+0x41/0x50 [ 255.757993][ T9575] kobject_put.cold+0x28f/0x2ec [ 255.762829][ T9575] cdev_put.part.0+0x39/0x50 [ 255.767497][ T9575] cdev_put+0x20/0x30 [ 255.772007][ T9575] __fput+0x6df/0x8d0 [ 255.775983][ T9575] ____fput+0x16/0x20 [ 255.779967][ T9575] task_work_run+0x14a/0x1c0 [ 255.784567][ T9575] exit_to_usermode_loop+0x273/0x2c0 [ 255.790385][ T9575] do_syscall_64+0x52d/0x610 [ 255.800653][ T9575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.806708][ T9575] RIP: 0033:0x4120b1 [ 255.810608][ T9575] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 255.830208][ T9575] RSP: 002b:00007fff49861e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 255.838624][ T9575] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004120b1 [ 255.846584][ T9575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 255.854628][ T9575] RBP: 000000000073c900 R08: 00000000a6739d89 R09: 00000000a6739d8d [ 255.862588][ T9575] R10: 00007fff49861ed0 R11: 0000000000000293 R12: 000000000073c900 [ 255.870551][ T9575] R13: 000000000003e1d0 R14: 00000000000003e8 R15: 000000000073bf0c [ 255.879325][ T9575] Kernel Offset: disabled [ 255.883651][ T9575] Rebooting in 86400 seconds..